11921 matches found
exploit-CVE-2021-22204
Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a โญ! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...
cve_2024_0044
CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...
cve_2024_0044
CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...
CVE-2022-24086
CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...
CVE-2024-46635
CVE-2024-46635 ่ๆฏ GongZhiDao ใทในใใ ใฏใGongZhiDao ใซใใฃใฆ้็บใใใใใฉใใใใฉใผใ ใงใใใฆใผใถใผ็ฎก็ใใใผใฟๅๆใ้็จๆฉ่ฝใชใฉใฎใจใณใฟใผใใฉใคใบๅใใฝใชใฅใผใทใงใณใๆไพใใพใใใใใใ้ฉๅใช่ชๅฏใชใใซๆฉๅฏใฆใผใถใผๆ ๅ ฑใ้ฒๅใใๅฏ่ฝๆงใใใใปใญใฅใชใใฃ่ๅผฑๆงใใใใAPIใจใณใใใคใณใใง็บ่ฆใใใพใใใ ่ๅผฑๆงใฎ่ชฌๆ GongZhiDao ใทในใใ ใฎ /oaa/api/AccountMaster/GetCurrentUserInfo API ใจใณใใใคใณใใซ่ๅผฑๆงใๅญๅจใใพใใUserNameOrPhoneNumber ใใฉใกใผใฟใฎไปฃใใใซ...
Citrix ADC/Gateway - Cross-Site Scripting
Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 contain a cross-site scripting vulnerability due to improper input validation. id: CVE-2020-8191 info: name: Citrix...
CVE-2025-20281-Cisco
CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...
CVE-2026-0848-PoC-Improper-Input-Validation
CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC โ ๏ธ WARNING This code executes arbitrary commands on your system. Use ONLY in virtual machines or isolated containers. Description Functional PoC for CVE-2026-0848. Demonstrates how a malicious JAR file can execute arbitrary code when loaded by NLTK...
cve-2022-44268
CVE-2022-44268 ImageMagick is a free and open-source cross-platform software suite for displaying, converting, and editing raster image and vector image files. It can read and write over 200 image file formats. ImageMagick is licensed under the Apache License 2.0. It is available in the form of...
CVE-2025-47812
CVE-2025-47812 Improper input validation led to Remote Code Execution to full system compromise ๐ Introduction: Julien Ahrens from RCE Security discovered a critical security vulnerability impacting WingFTP. Tracked as CVE-2025-47812, the vulnerability has a CVSS score of 10. Successful...
CVE-2026-20237
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...
CVE-2022-24086-RCE-PoC
CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being โexploited in the wild in very limited attacksโ received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...
CVE-2025-24963
CVE-2025-24963 - Vitest Browser Mode - Local File Read โCVE-2025-24963 is a medium-severity vulnerability CVSS 3.1 score: 5.9 affecting the @vitest/browser package, a component of the Vitest testing framework powered by Vite. This vulnerability arises from improper input validation in the...
CVE-2020-11890
Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...
Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-41293, CVE-2026-43512, CVE-2026-43513, CVE-2026-43515)
Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-41293, CVE-2026-43512, CVE-2026-43513, CVE-2026-43515 Vulnerability Details CVEID:CVE-2026-41293 DESCRIPTION: Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat:...
Blackash-CVE-2025-20393
๐ก๏ธ CVE-2025-20393 โ Critical Cisco AsyncOS Vulnerability ๐ Overview CVEโ2025โ20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual โ ๏ธ Only systems with...
CVE-2026-91738
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-91738
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91738
CVE-2026-91738 is an improper input validation vulnerability in ANGLE (the cross-platform graphics translation library) within Google Chrome , fixed in version 153.0.8010.47 for Windows, Mac, and Linux. A remote attacker could potentially execute arbitrary code outside the sandbox by luring a use...
EUVD-2026-79992
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...