27277 matches found
CVE-2025-68613-Python-Exploit
CVE-2025-68613: n8n Workflow Expression RCE Proof of Concept PoC exploit for a critical Remote Code Execution vulnerability in the n8n workflow automation platform. Description The vulnerability exists in the n8n expression evaluation system. User-supplied expressions are not properly sandboxed,...
cve-2021-42013-docker-lab
CVE-2021-42013 Introduction It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not...
CVE-2021-4045
CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...
nat-tunnel
NAT Tunnel v0.01 If you have access to a server with public IP and unfiltered ports you can run NAT Tunnel NT server on the server, and NT client on your box behind NAT. the server requires 2 open ports: one for communication with the NT client --admin, the other for regular clients to connect to...
CVE-2023-32560
This repository does not have a README...
cve-2020-7247
cve-2020-7247 Exploit Title: OpenSMTPD 6.6.2 - Remote Code Execution. The new Date: 2020-01-29. Exploit Author: 1F98D. Original Author: Qualys Security Advisory. Vendor Homepage: https://www.opensmtpd.org/. Software Link: https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1. Version:...
CVE-2024-21534-poc
Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...
CVE-2024-24576-PoC
CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...
CRM Platform Path Traversal DoS
The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...
YouGile Project Management Service Unauthorized Access
The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Dr.Web ConfigD Executable Buffer Overflow DoS
The vulnerability of the Dr.Web ConfigD executable module is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose the protected information...
CommuniGate Pro Access Control Unauthorized Modification
The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...
Bestechnic BES2300 Bluetooth Audio SoC Buffer Overflow DoS
The vulnerability of the l2caphandledata function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially...
Test IT SSRF
The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
ClamAV Insufficient Validation
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
FOQUZ Platform Authentication Bypass
The vulnerability of the FOQUZ platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2023-43356-CMSmadesimple-Stored-XSS---Global-Settings
CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Global Meatadata in the Settings- Global Settings Menu. Attack Vectors: Scripting A vulnerability...
CVE-2023-33253
CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...