CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

EUVD-2026-105045

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

CVE-2026-112944

The launch-editor Node.js package is vulnerable to argument injection prior to version 2.14.2 . When an attacker can create a filesystem entry starting with a plus (+) or minus (-) in the working directory, launchEditor may forward this path without forcing it to be interpreted as a positional fi...

CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

activemq-cve-2023-46604

Active MQ CVE-2023-46604 exploit This repository is a guide with examples on how to exploit the CVE-2023-46604 The exploit takes advantage of the usage of reflection for instantiating Exception classes through a malicious command that instead of being a valid command, it sends as the exception...

react2shell-burp

React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 — a pre-authentication remote code execution flaw in React Server Components. The extension...

DetectTrace

DetectTrace A detection should have fired. It didn't. DetectTrace tells you exactly why. DetectTrace is an open-source detection engineering tool for testing security detections end to end and localising the first failing stage. Instead of testing only a SIEM query, DetectTrace treats a detection...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE lab End-to-end working RCE exploit + reproducible lab for CVE-2019-13132 , a stack buffer overflow in libzmq's CURVE INITIATE handshake handler. An attacker who knows the server's long-term public key a public parameter by design can...

CVE-2021-41773m

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution PHP code injection exploit for Dolibarr ERP/CRM v17.0.0 that allows obtaining a reverse shell as www-data user via the Website/CMS module. ⚠️ For educational purposes and authorized audits only. 📑 Table of Contents What is...

CVE-2026-39987-Lab

CVE-2026-39987 — marimo Pre-Auth Terminal WebSocket RCE Lab Local-only Docker lab for reproducing and understanding CVE-2026-39987 in marimo. This project compares a vulnerable marimo service with a patched marimo service side-by-side, then demonstrates the difference using a least-harm proof...

CVE-2021-26084

CVE-2021-26084 Confluence Remote Code Execution RCE Code By:Junsheng @ Orange Cybersecurity Laboratory Orange Cybersecurity Laboratory https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read online...

Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

Bludit Bruteforce Mitigation Bypass Script Overview This script is a refurbished Bash implementation of an exploit targeting the Bludit CMS version = 3.9.2. It leverages a vulnerability CVE-2019-17240 that allows brute-forcing passwords by bypassing the CSRF token-based protection. The original...

CVE-2026-112942 launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...

CVE-2026-112942 launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...

CVE-2026-112942

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...

CVE-2026-112942 launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...

EUVD-2026-105035

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...

CVE-2026-112942

The launch-editor Node.js package is vulnerable to a validation bypass on Windows prior to version 2.14.2 . The launch-editor-middleware component fails to correctly validate file paths because it resolves paths while a line-and-column suffix is present, but removes that suffix before performing ...

CVE-2022-22029-NFS-Server-

Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 To successfully exploit this vulnerability, an attacker must succeed in a race condition. Making an unauthenticated, carefully constructed call to a Network File System NFS service could be used to exploit this...