CVE-2026-79750 MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own list views and config edits enforce ownership, but the...

CVE-2026-79750

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs. Prior to version 1.0.30 , while list views and config edits correctly enforce per-user ownership, the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP serve...

CVE-2024-23897

CVE-2024-23897: Jenkins Arbitrary File Read Vulnerability Leading to RCE Introduction This repository contains a Python script that exploits a critical vulnerability CVE-2024-23897 in Jenkins, leading to arbitrary file read and remote code execution RCE. This vulnerability allows an unauthenticat...

CVE-2024-8856

CVE-2024-8856: WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability Overview CVE-2024-8856 is a security vulnerability found in the WP Time Capsule plugin for WordPress that allows unauthenticated users to upload arbitrary files to the server. This can lead to remote code executio...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...

CVE-2025-1307

Newscrunch एक्सप्लॉइट CVE-2025-1307 🚨 अवलोकन यह एक्सप्लॉइट Newscrunch WordPress थीम में एक गंभीर भेद्यता CVE-2025-1307 को लक्षित करता है। यह दोष newscrunchinstallandactivateplugin फ़ंक्शन में क्षमता जांच की कमी के कारण प्रमाणित उपयोगकर्ताओं सब्सक्राइबर और उससे ऊपर को मनमानी फ़ाइलें अपलोड करने की...

CVE-2021-3129

CVE-2021-3129 लारावेल = V8.4.2 डीबग मोड रिमोट कोड निष्पादन RCE के लिए मास स्कैन उपकरण | Python संदर्भ Ambionics.io PHPGCC PHPGCC श्रृंखला Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2 Monolog/RCE3 Monolog/RCE4 पर्यावरण चर इस...

CVE-2019-0232

Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...

RCE_CVE-2024-7954-

RCECVE-2024-7954- El plugin porteplume utilizado por SPIP antes de 4.30-alpha2, 4.2.13 y 4.1.16 es vulnerable a una ejecución de código arbitrario. Un atacante remoto no autenticado puede ejecutar PHP arbitrario como el usuario de SPIP enviando una solicitud HTTP manipulada. CRÍTICO Exploit: POST...

PCmanBoF

PCman FTP Server Buffer overflow and Remote Code Execution CVE-2013-4730 A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7 How it works? That easy BoF overwrite the buffer and execute the shellcode that will connect back reverse shell Vuln machines: WindowsXP SP...

CVE-2019-19781

CVE-2019-19781 Ejecución Remota de Comandos en Citrix ADC Referencia: https://www.exploit-db.com/exploits/47901...

CVE-2023-47400

CVE-2023-47400 CVE-2023-47400 के लिए प्रमाण अवधारणा प्रमाणीकृत PHP रिमोट कोड निष्पादन Nagios XI 5.11.0 पर मनमानी फ़ाइल लेखन के माध्यम से !Note यह poc NCC समूह द्वारा प्रकाशित तकनीकी सलाह पर आधारित है https://research.nccgroup.com/2023/12/13/technical-advisory-multiple-vulnerabilities-in-nagios-xi...

cve-2020-14882

cve-2020-14882 Script Bash para explotar la ejecución remota de comandos no autenticada en Oracle Weblogic - CVE-2020-14882 Uso ./cve-2020-14882.sh...

CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a POST request to /wsman with the content of payload.xml and only change the command with your desired one, AS POC, only id command is executed. Source: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Follow if you like :...

libssh2: integer overflow via large username or password arguments

A flaw was found in the libssh2 library. A remote attacker can exploit an integer overflow vulnerability in the userauthpassword function by manipulating the usernamelen or passwordlen arguments and cause a heap-based buffer overflow. This leads to a crash to the application linked to the library...

libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation

A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution...

libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...

Important: Red Hat Security Advisory: libssh2 security update

An update for libssh2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

A flaw was found in libssh2. A malicious SSH Secure Shell server can exploit a double-free vulnerability in the sftpopen function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP SSH File Transfer Protocol session. This heap corruption can...

webmin_docker_and_exp

Docker-webmin-RCE-lab 1. Dockerfiles para la recurrencia de CVE-2019-15107 webmin RCE incluyendo v1.890 y v1.920. 2. Exploit para cada versión. Construir la imagen root@kitploit: First, clone the files Then cd webmin1.890/1.920docker docker build -t hachp1/webmin . Ejecutar el contenedor...