CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58567

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

EUVD-2026-69302

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-83608

A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. A remote attacker can exploit this vulnerability by providing a specially crafted DocumentType.name containing characters like or whitespace. This bypasses the requireWellFormed validation, allowing the injection of...

CVE-2026-82393

A flaw was found in pnpm. This vulnerability allows a remote attacker to perform a path traversal by crafting a malicious tarball dependency's manifest name. During package installation, pnpm fails to properly validate the manifest name, leading to files being extracted outside the intended...

cve-2022-36804

CVE-2022-36804 Bitbucket PoC 이 저장소에는 Atlassian Bitbucket Server/Data Center 취약점 CVE-2022-36804를 위한 Python 익스플로잇 스크립트가 포함되어 있습니다. 이 문제는 Git 아카이브 흐름에서 발생하는 명령 삽입 결함으로, 조작된 prefix 매개변수가 서버에 의해 해석되어 셸 명령으로 실행될 수 있습니다. CVE-2022-36804란 무엇인가? CVE-2022-36804는 Bitbucket Server/Data Center 원격 명령 실행 취약점입니다....

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

CVE-2026-10195 FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec function, combined with missing authorization checks on the REST API endpoints...

EUVD-2026-69300

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec function, combined with missing authorization checks on the REST API endpoints...

CVE-2026-10195

FS-Poster WordPress plugin (versions up to and including 8.0.1 ) is vulnerable to authenticated remote code execution via insufficient sanitization of the FFmpeg path parameter before it is passed to the exec() function, combined with missing authorization checks on REST API endpoints. Attackers ...

Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-

제어된 환경에서의 BlueKeepCVE-2019-0708 취약점 익스플로잇 Windows Server 2008 R2의 RDP 서비스에서 BlueKeepCVE-2019-0708 취약점을 익스플로잇하는 과정의 분석, 실행 및 문제 해결에 초점을 맞춘 학술 프로젝트로, Instituto Profesional Los Leones의 사이버보안 과목을 위해 개발되었습니다. 목표 가상화 환경에서 Nmap을 이용한 초기 정찰부터 Metasploit/Meterpreter를 통한 권한 상승 및 대상 시스템과의 상호 작용까지 전체 침투 테스트 흐...

CVE-2020-6418

CVE-2020-6418: Windows 권한 상승과 연결된 Chrome RCE 이 리포지토리에는 CVE-2020-6418에 대한 동작하는 단일 단계 익스플로잇 체인이 포함되어 있습니다 V8의 Turbofan 컴파일러의 타입 혼동 버그로, Google Chrome 80.0.3987.87 x64에 영향을 줍니다. 취약한 Chrome으로 악성 페이지를 방문하면 렌더러 프로세스 내에서 네이티브 코드 실행이 가능해집니다. 여기서 익스플로잇은 두 가지 버그를 연결하는 두 번째 바이너리를 다운로드해 실행합니다...

CVE-2026-79682

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

EUVD-2026-69299

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-79682

Dell PowerStore is affected by a Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) with a local attack vector, low complexity, and changed scope, resulting in high impact ...

mgo3-rce

MGO3 RCE 이 저장소는 CVE-2026-19874에 관한 정보를 포함합니다. 문서 데모 영상 타임라인 2026-06-26: 취약점 발견 2026-06-26: 코나미에 첫 연락 2026-07-01: 취약점이 코나미에 보고됨 2026-08-04: 취약점이 코나미에 의해 조용히 패치됨 https://steamdb.info/patchnotes/24176213/ 면책 조항 이 소프트웨어는 순전히 학술 연구 목적으로 제작되었습니다. 다른 시스템을 공격하는 데 사용하기 위한 것이 아닙니다. 프로젝트 관리자는 소프트웨어의 오용에 대해...

cve-2022-41352-zimbra-rce

이 저장소에는 README가 없습니다...

CVE-2020-9496

CVE-2020-9496 - RCE webtools の2つの xmlrpc 関連リクエスト（xmlrpc と ping）は認証を使用していないため、安全でないデシリアライゼーションに対して脆弱です。この問題は、GitHub Security Lab チームの Alvaro Munoz [email protected] によってセキュリティチームに報告されました。 この脆弱性は、/webtools/control/xmlrpc に送信されたリクエストを処理する際の Java...

CVE-2022-35914-RCE

CVE-2022-35914 by cyb3rk0ala PoC for CVE-2022-35914 , a command-injection vulnerability involving the htmLawed test component in vulnerable GLPI installations. The tool provides command execution through the vulnerable endpoint and includes optional callback functionality for authorized lab...

EUVD-2026-69293

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type e.g., text/html for .html files, image/svg+xml for .svg files and without a Content-Disposition: attachment header when using local filesystem...