CVE-2023-36144

CVE-2023-36144 PoC of CVE-2023-36144 - Intelbras Switch SG 2404 MR L2+ firmware 1.00.54 Download the backup file unauthenticated Steps to Reproduce: 1. Go to the following link http://127.0.0.1/cgi-bin/exportCfgwithpasswd replace 127.0.0.1 with the device IP 2. It will auto download the backup...

Exploit for CVE-2026-21589

CVE-2026-21589 Pre-auth arbitrary file read in Atlassian DC p...

CVE-2026-39754

Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...

CVE-2026-39754 WordPress Piotnet Addons For Elementor plugin <= 7.1.71 - Arbitrary File Download vulnerability

Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...

CVE-2026-39754

The Piotnet Addons For Elementor plugin for WordPress (versions

EUVD-2026-93263

Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...

WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF

WordPress Automatic plugin 3.92.1 is vulnerable to unauthenticated Arbitrary File Download and SSRF Located in the downloader.php file, could permit attackers to download any file from a site. Sensitive data, including login credentials and backup files, could fall into the wrong hands. This...

EUVD-2026-92874

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...

CVE-2026-82988

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...

Buffer Overflow vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94587)

: A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...

Command Injection via Unsanitized Remote Brocade Fabric OS Configuration Import Utility

: An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a configuration download operation, the management daemon will relay configuration parameters, user-supplied relay host...

An input validation and command injection vulnerability exists in the firmware download and upgrade component of Brocade Fabric OS

: Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted into system command strings and executed through a system shell interface. Because control...

Command Injection vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94586)

: A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...

ActiveMQ-cve-2026-42588-scanner-gui

ActiveMQ-cve-2026-42588-scanner-gui 【One-click VPS Exploitation Recommended for users with a VPS】 1. Enter the VPS public IP and listening port e.g., 9999 2. Enter the command to execute e.g., touch /tmp/cvepwned 3. Click Generate VPS Command → Click Copy Command 4. SSH into the VPS, paste the...

CVE-2026-82988

The ViewSonic ViewBoard smartboard, which uses an Android-based system, is vulnerable to an arbitrary file download in its vCast APK delivery mechanism . An unauthenticated remote attacker can trigger the installation of an unprivileged APK by serving a malicious URL through an unauthenticated do...

CVE-2026-82988 CVE-2026-82988

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...

CVE-2026-27944

CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red A proof‑of‑concept PoC exploit for CVE‑2026‑27944, a critical vulnerability in Nginx...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

lighthouse

Lighthouse - A Coverage Explorer for Reverse Engineers Overview Lighthouse is a powerful code coverage explorer for IDA Pro and Binary Ninja, providing software researchers with uniquely interactive controls to study execution maps for native applications without requiring symbols or source. This...

cvedb

CVEdb CVEdb — это еще одна библиотека и утилита для работы с базой данных CVE на Python. Подобных уже много. Зачем создавать еще одну? Большинство существующих библиотек полагаются на сторонний API, например cve.circl.lu, который может и действительно ограничивает использование, требует регистрац...