TP-Link TL-WR840N - Command Injection

The TP-Link TL-WR840NESV6.20180709 router contains a command injection vulnerability in the oalsetIp6DefaultRoute component. This vulnerability allows authenticated attackers to execute arbitrary system commands, leading to complete device compromise. id: CVE-2022-25061 info: name: TP-Link...

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload

Joomla Page Builder CK contains an unrestricted file upload vulnerability caused by lack of proper validation, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56290 info: name: Page Builder CK = 3.5.10 - Unauthenticated Arbitrary File Uplo...

Adobe ColdFusion - RDS Arbitrary File Write

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary code execution in the context of the current user. The RDS FILEIO WRITE operation allows unauthenticated...

Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

FoxCMS v.1.2.5 - Remote Code Execution

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. id: CVE-2025-29306 info: name: FoxCMS v.1.2.5 - Remote Code Execution author: ritikchaddha severity: critical description: | An issue in FoxCMS v.1.2.5 allows a...

Better Search Replace < 1.4.5 - PHP Object Injection

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...

Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution

Monsta FTP = 2.11 contains an unrestricted file upload vulnerability caused by lack of authentication on file uploads, letting unauthenticated attackers execute arbitrary code by uploading crafted files. id: CVE-2025-34299 info: name: Monsta FTP = 2.11.2 - Unauthenticated Remote Code Execution...

ETQ Reliance - Authentication Bypass via Trailing Space

An authentication bypass vulnerability exists in ETQ Reliance on the CG legacy platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login pag...

Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution Vulnerability

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter. id: CVE-2016-4437 info: name: Apache Shiro 1.2.4 Cookie RememberME -...

Joomla-3.4.6---configuration.php-Remote-Code-Execution

Joomla-3.4.6---configuration.php-Remote-Code-Execution Betroffene Versionen: 3.0.0-3.4.6 1. Schwachstellenvalidierung python3 Joomla-3.4.6-RCE.py -t http://172.20.10.4 Wird „Vulnerable“ angezeigt, ist die Schwachstelle vorhanden. python3 test.py -t http://127.0.0.1:8080/ --exploit --lhost...

CVE-2018-17553

CVE-2018-17553 CVE-2018-17553 PoC（Navigate CMS 版本 2.8 及更早版本） 此概念验证（PoC）是在处理 TCM 的 Black Pearl 靶机时编写的。除了使用 Metasploit 之外，我找不到其他人发布过 PoC。由于我在黑客学习之旅中避开了 Metasploit（计划之后再用它重新做一遍所有内容），所以我快速整理了此 PoC，供其他处于相同处境的人使用。 此 PoC 假设您已经手动利用了 CVE-2018-17552 获取了访问权限（或者通过其他方式获得了访问权限）。 目前，该脚本不会对您的输入进行任何验证，也不会对 cURL...

CVE-2026-27597

CVE-2026-27597 - Esecuzione Remota di Codice nella versione Utilizzo Rapido root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Note sullo Sfruttamento Gravità: CRITICA CVSS: 10.0 Impatto: Riservatezza, Integrità, Disponibilità Pubblicato: 2026-02-25...

POC2-CVE-2025-55182

React2Shell Ultimate — сканер CVE-2025-66478 Самый всеобъемлющий сканер уязвимости удалённого выполнения кода Next.js RSC root@kitploit: ╔════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | || / || | | | | ║ ║ | | / / |/ | | / /\ | ' \ / \ | | ║ ║ | / | | | | /...

cve-2024-43425

CVE-2024-43425 Информация о приложении: Название приложения: Moodle Версия сборки: moodle-4.4.1 Затронутые версии: 4.4–4.4.1, 4.3–4.3.5, 4.2–4.2.8, 4.1–4.1.11 и более ранние неподдерживаемые версии Ссылка для скачивания: moodle-4.4.1 Описание и воздействие Злоумышленники, имеющие право создавать...

CVE-2026-2441

CSS in Google Chrome precedente all'esecuzione di codice remoto CVE-2026-2441 Panoramica È stata identificata una vulnerabilità di gravità ALTA, classificata come CVE-2026-2441, categorizzata sotto CWE-416, CWE-416, CVSS 8.8. Un use-after-free in CSS in Google Chrome precedente alla versione...

CVE-2026-21531

Bypass delle Funzionalità di Sicurezza in ASP.NET Core di Microsoft CVE-2026-21531 🌟 Descrizione Una vulnerabilità nell'Azure SDK facilita la deserializzazione di dati non attendibili, consentendo ad attaccanti non autorizzati di eseguire codice arbitrario su una rete. ⚙️ Installazione Per...

Webmin1.910_exploit

Webmin 1.910 रिमोट कोड एक्ज़ीक्यूशन एक्सप्लॉइट विवरण: इस रिपॉज़िटरी में एक Python 3 स्क्रिप्ट है जो Webmin संस्करण 1.910 में रिमोट कोड एक्ज़ीक्यूशन भेद्यता का शोषण करने के लिए डिज़ाइन की गई है। स्क्रिप्ट प्रमाणीकरण करने और रिवर्स शेल पेलोड तैनात करने के लिए sessionlogin.cgi एंडपॉइंट का उपयोग करती...

CVE-2025-68937

CVE-2025-68937 - Gitea/Forgejo Template-Symlink-RCE Automatisierter Proof-of-Concept für CVE-2025-68937 : Directory-Traversal über Symlink-Auflösung bei der Template-Repository-Verarbeitung in Gitea und Forgejo, was zu Remote-Codeausführung führt. Jeder authentifizierte Benutzer kein Admin...