280580 matches found
Exploit for OS Command Injection in Hoverfly
CVE-2025-54123 Hoverfly CVE RCE Usage bash python3 CVE...
ha-ps4-jb
🎮 PS4 JB Web Server — Home Assistant Add-on A Home Assistant...
Exploit for CVE-2026-7299
CVE-2026-7299 - Appsmith 1.98 Stored XSS SQL Autocomplete inn...
📄 Langflow 1.8.1 Remote Code Execution
This Python script is a multi-threaded tool targeting a suspected vulnerability in Langflow versions 1.8.1 and below that allows unauthenticated remote code execution through unsafe execution of CustomComponent code during flow compilation...
📄 NLTK 3.9.2 Arbitrary File Read / Path Traversal
NLTK versions 3.9.2 and below suffer from an arbitrary file read issue due to a path traversal vulnerability. CVE-2026-0847 — NLTK Multiple CorpusReader Classes: Arbitrary File Read via Path Traversal --- Overview | Field | Details | |---|---| | CVE ID | CVE-2026-0847 | | Package | nltk Natural...
📄 WordPress Datalogics Ecommerce Delivery Privilege Escalation
WordPress Datalogics Ecommerce Delivery plugin versions prior to 2.6.60 suffer from a privilege escalation vulnerability. ===============================================================================================================================================================================...
📄 FreeScout 1.8.206 Remote Code Execution
This Metasploit module exploits an unauthenticated remote code execution vulnerability in FreeScout versions less than or equal to 1.8.206 CVE-2026-28289. The sanitizeUploadedFileName function checks for dot-prefixed filenames before stripping Unicode format characters ZWSP U+200B, allowing...
📄 lollms-webui Server-Side Request Forgery
A critical server-side request forgery vulnerability has been identified in lollms-webui, the web interface for Lord of Large Language and Multi modal Systems. The @router.post"/api/proxy" endpoint allows unauthenticated attackers to force the server into making arbitrary GET requests. This can b...
📄 Google Keras 3.13.0 Denial of Service
A denial of service vulnerability exists in the HDF5 weight loading component of Google Keras versions 3.0.0 through 3.13.0 on all platforms. The vulnerability is caused by the absence of any validation or throttling when processing HDF5 dataset shape metadata declared inside a .keras archive...
📄 Wagtail CMS 6.4.1 Cross Site Scripting
Wagtail CMS version 6.4.1 is vulnerable to a persistent cross site scripting vulnerability in the document upload functionality. An attacker can embed a malicious payload inside a PDF file. When the uploaded document is accessed via the CMS interface, the payload may execute in the context of the...
📄 Grav CMS 1.7.49.5 Remote Code Execution
Grav CMS versions 1.7.49.5 and below with Admin Plugin versions 1.10.49.3 and below are vulnerable to an authenticated remote code execution vulnerability via the "Direct Install" feature in the administrative interface. An authenticated administrator can upload a crafted plugin archive containin...
📄 Microsoft Windows RRAS Integer Overflow
This Metasploit module simulates a remote exploitation attempt against a hypothetical integer overflow vulnerability in Windows RRAS, which could lead to a heap-based overflow and potential remote code execution...
📄 NLTK StanfordSegmenter 3.9.2 Arbitrary Code Execution
nltk.tokenize.StanfordSegmenter dynamically loads external Java .jar files via subprocess without performing any integrity verification, signature checking, or sandboxing. The class accepts fully attacker-controlled parameters including pathtojar, pathtomodel, pathtodict, and javaclass, and passe...
📄 Langflow 1.8.1 Remote Code Execution
This Metasploit auxiliary module scans Langflow instances for CVE-2026-33017, an unauthenticated remote code execution vulnerability affecting versions 1.8.1 and below. ================================================================================================================================...
Exploit for OS Command Injection in Hoverfly
CVE-2025-54123 - Hoverfly Command Injection RCE PoC CVE-2...
Exploit for Out-of-bounds Write in Apple Ipados
CVE-2026-20698 — XNU Kernel Heap Overflow via PFROUTE RTAGEN...
binary-exploitation-writeups
Binary Exploitation Writeups A collection of pwn challenges c...
