479136 matches found
CVE-2026-27971_POC
CVE-2026-27971 — Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...
CVE-2026-98267
A flaw was found in the Linux kernel's 9P file system implementation. When write operations extend a file, the kernel fails to update the recorded file size to reflect the new length. A local user performing write operations on a 9P mount can trigger this issue, leading to inconsistent file state...
CVE-2022-40471
CVE-2022-40471 – CPMS Authenticated File Upload RCE 📌 Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...
CVE-2017-1000028
CVE-2017-1000028 POC&EXP for GlassFish4.1.1not including 4.1.1. Param: -u:For single url but without outputing the /etc/passwd. -ut:For single url but with outputing the /etc/passwd. -f:Read url from the url.txt and prove it if the url is vulnerable. -c:This must be used with the parameter...
CVE-2024-27460
CVE-2024-27460 HP Plantronics Hub 3.25.1 Updater Privilege Escalation/Arbitrary File Read Description: HP Plantronics Hub 3.25.1 suffers from a bug that allows low privileged users to perform arbitrary file read as SYSTEM on the machine where the application is installed. Moreover, it is possible...
CVE-2025-13796-PoC
CVE-2025-13796-PoC deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery PoC : curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...
CVE-2020-7699_reproduce
CVE-2020-7699 Reproduction Reproduction for Node.js RCE vulnerabilityCVE-2020-7699, my lab work Setup Node.js edition: v14.16.1, please make sure that the edition of Node.js is 14Other edition will propably work, I didn't test Python edition：3.9.5, Python is only used to send HTTP attack request,...
CVE-2025-34299
CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious SFTP server. How does this detection method work? This...
ipatool
ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements A supported operating system macOS, Linux, Windows or iOS. An Apple Account already configured to use the...
CVE-2026-78530
The WordPress FoodBakery theme (versions
CVE-2026-78530 WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in FoodBakery = 4.6 versions...
EUVD-2026-96525
Subscriber Arbitrary File Deletion in FoodBakery = 4.6 versions...
CVE-2026-66566 WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Ambient = 1.7 versions...
EUVD-2026-96520
Unauthenticated Local File Inclusion in Ambient = 1.7 versions...
CVE-2026-66566
The WordPress Ambient theme (versions
CVE-2026-66481 WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability
Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...
EUVD-2026-96514
Author Arbitrary File Deletion in Presto Player Pro = 3.0.1 versions...
CVE-2026-66481
The Presto Player Pro plugin for WordPress (versions