318588 matches found
EUVD-2026-77527
Description When launching a Docker or OCI worker, the setuid-root worker-launcher first changes ownership of the entire worker directory to the untrusted topology user, and only afterwards reads and acts on the command file that the supervisor wrote into that same directory. The file is opened...
wp2shell-scanner
wp2shell-scanner Detection and validation tooling for WordPress core exposure to wp2shell CVE-2026-63030 / CVE-2026-60137. Modes are selected with a flag, and the target is positional. --scan fingerprints the core version and confirms the REST /batch/v1 route is reachable without sending an explo...
CVE-2026-82431
Apache Storm 's SimpleACLAuthorizer contained a logic flaw: when nimbus.users was empty, the code returned early before evaluating nimbus.groups, silently ignoring group-based access controls. Operators who restricted cluster access by group alone received no restriction at all βevery authenticat...
CVE-2026-82431 Apache Storm Client: Authorization Bypass When nimbus.groups Is Configured Without nimbus.users
Description SimpleACLAuthorizer evaluated the user-level command set by returning early when nimbus.users was empty, before nimbus.groups was considered. An operator who restricted cluster access by group alone, leaving nimbus.users unset, therefore received no restriction at all: every...
CVE-2026-82431 Apache Storm Client: Authorization Bypass When nimbus.groups Is Configured Without nimbus.users
Description SimpleACLAuthorizer evaluated the user-level command set by returning early when nimbus.users was empty, before nimbus.groups was considered. An operator who restricted cluster access by group alone, leaving nimbus.users unset, therefore received no restriction at all: every...
EUVD-2026-77525
Description SimpleACLAuthorizer evaluated the user-level command set by returning early when nimbus.users was empty, before nimbus.groups was considered. An operator who restricted cluster access by group alone, leaving nimbus.users unset, therefore received no restriction at all: every...
CVE-2018-14714-POC
CVE-2018-14714-POC Apr 25 2020, Altin Thartori, github.com/tin-z Vulnerability Details System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "loadscript" URL parameter References For CVE-2018-14714 :...
Exploit-For-CVE-2022-36067
Exploit-For-CVE-2022-36067 This repo contains payload for the CVE-2022-36067 How to exploit? Paste the payload given in payload.js along with the command you want to run. Test on local machine. To test on local machine, git clone the repo, install the dependecies and run app.js using node. If the...
CVE-2023-4911-PoC
GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911 Overview The GNU C Library glibc serves as the C library in the GNU system and is integral to Linux-based systems. At its core, glibc defines essential functionalities for programs, including system calls and common functions like open,...
gpasskey
======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...
CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection
A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...
CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection
A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...
CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection
A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...
EUVD-2026-77489
A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...
CVE-2026-90788
A remote OS command injection vulnerability affects the Template Handler component of magicblack MacCMS10 (version 2026.1000.4055), specifically via manipulation of the file admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html. The attack requires high privileges (authe...
Wordfence Bug Bounty Program Monthly Report β May 2026
In May 2026, the Wordfence Bug Bounty Program received 1095 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...
CVE-2019-5475-EXP
CVE-2019-5475-EXP CVE-2019-5475-EXP γNexus Repository Manager 2.x Remote Command Execution Vulnerabilityγ Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...
CVE-2023-3047
Telegram : @ghostmans3c or @Chrome2024 Donate BTC : 17L22i227Keet23QCNaeCyrQ6xfiTQpQJ5 PoC How To Exploit CVE-2023-3047 Description Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMT Lockcell allows SQL Injection.This issue affects Lockcell:...
CVE-2022-28171-POC
CVE-2022-28171-POC I originally published this on ExploitDB, which you can find at https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution root@kitploit: Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...
CVE-2023-20887
CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://kushagraojha.medium.com/vmware-vrealize-network-insight-cve-2023-20887-193f3c3d30a0...