BiblioRCE

An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...

CVE-2020-14974

CVE-2020-14974 A simple POC that demonstrates A vulnerability found in IObitUnlocker 1.1.2 that leverages IOCTL codes found it its vulnerable driver IObitUnlocker.sys, providing ability to unlock, delete, rename, copy, and move running files as a low privileged user. Resources...

CVE-2026-103407

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

AsmResolver

AsmResolver AsmResolver is a library for reading, modifying and reconstructing Portable Executable PE files. It supports PE images running natively on Windows, as well as images containing managed .NET metadata. AsmResolver is released under the MIT license. Main Features AsmResolver has a lot of...

MAGNOLIA-8281

MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...

CVE-2022-1388

CVE-2022-1388 Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Access via wfufiledownloader.php file, WordPress File Upload Solution poc, solution vulnerability occurs, arbitrary file access, manipulation, or modification is possible...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

CVE-2026-116191

A flaw was found in Rclone's Web Distributed Authoring and Versioning WebDAV service. Due to improper validation of directory traversal sequences, a remote, unauthenticated attacker can send specially crafted WebDAV requests containing directory traversal sequences. This vulnerability allows the...

CVE-2026-116020 BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages

BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments by ID. Attackers with attachment permissions can enumerate sequential attachment IDs to download, rename, relink, or...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a security vulnerability. This vulnerability arises because the built-in /flags service can be manipulated via ?setvalue= to alter the bvar/mbvar dump path; additionally, the bvardumptabs path is not properly sanitized. As a result, remote attackers...

CVE-2026-79985

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel SMB component. This issue affects Apache Camel: from 4.2.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the absolut...

CVE-2026-79983

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel FTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the absolut...

CVE-2026-79985

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel SMB component. This issue affects Apache Camel: from 4.2.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the absolut...

PT-2026-117333

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.2.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description A path traversal issue exists in the Apache Camel SMB component. The remote-file consumers build absolute remote paths by concatenating a...

CVE-2026-110874

Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize in functions.lib.php, which calls unserialize without class restrictions when jsondecode fails. Attackers able to write stored extrafields, export configurations or blocked log entries can plant serialized...

CVE-2026-110874 Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize()

Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize in functions.lib.php, which calls unserialize without class restrictions when jsondecode fails. Attackers able to write stored extrafields, export configurations or blocked log entries can plant serialized...

CVE-2026-110874

Dolibarr versions prior to 23.0.4 are vulnerable to a PHP object injection flaw within the jsonOrUnserialize() function in functions.lib.php. The vulnerability occurs because the application calls unserialize() without class restrictions when json_decode() fails. If an attacker can provide input ...

EUVD-2026-102349

Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize in functions.lib.php, which calls unserialize without class restrictions when jsondecode fails. Attackers able to write stored extrafields, export configurations or blocked log entries can plant serialized...