146 matches found
Royal Event - SQL Injection
Royal Event is vulnerable to a SQL injection vulnerability. id: CVE-2022-28080 info: name: Royal Event - SQL Injection author: lucasljm2001,ekrause,ritikchaddha severity: high description: | Royal Event is vulnerable to a SQL injection vulnerability. impact: | Successful exploitation of this...
Gogs <0.12.6 - Remote Command Execution
Gogs before 0.12.6 is susceptible to remote command execution via the uploading repository file in GitHub repository gogs/gogs. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id...
CHIYU TCP/IP Converter - Cross-Site Scripting
CHIYU BF-430, BF-431 and BF-450M TCP/IP Converter devices contain a cross-site scripting vulnerability due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, and ppp.cgi. id: CVE-2021-31250 info: name: CHIYU TCP/IP Converter - Cross-Site Scripting author: geeknik...
Apache Tomcat Servers - Remote Code Execution
Apache Tomcat servers 7.0.0 to 79 are susceptible to remote code execution. By design, you are not allowed to upload JSP files via the PUT method. This is likely a security measure to prevent an attacker from uploading a JSP shell and gaining remote code execution on the server. However, due to t...
Drupal - Remote Code Execution
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. id: CVE-2018-7600 info: name: Drupal - Remote Code Execution author:...
CVE-2025-55182-scanner
🔍 CVE-2025-55182-scanner - 脆弱性を簡単に検出 Download CVE-2025-55182-scanner 🚀 はじめに ようこそ！このガイドでは、CVE-2025-55182-scanner のダウンロードと実行方法を説明します。このツールは、アプリケーション内の露出した React Server Components エンドポイントを侵襲的に行わずに特定します。 🔧 システム要件 開始する前に、以下の環境を確認してください: オペレーティングシステム: Windows 10 以降、macOS、または Linux ディストリビューション。 ディスク容量:...
WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution
WordPress Contact Form 7 before 1.3.3.3 allows unrestricted file upload and remote code execution by setting supportedtype to php% and uploading a .php% file. id: CVE-2020-12800 info: name: WordPress Contact Form 7 1.3.3.3 - Remote Code Execution author: dwisiswant0 severity: critical description...
VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability
Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in information disclosure. id: CVE-2023-20889 info: name: VMware Aria Operations...
regreSSHion-Checker
OpenSSHセキュリティ監査ツール（regreSSHion および 2026年の脆弱性） リモートSSHサーバーが重大なOpenSSHエクスプロイトに対して脆弱かどうかを確認するために設計された、軽量で非侵襲なPythonツールです。SSHバナーを取得・解析して脆弱なバージョンを検出し、OS固有のセキュリティバックポート（特にUbuntu Noble 24.04向け）を考慮します。 🛡️ サポートされている脆弱性チェック 1. CVE-2024-6387（regreSSHion） ：OpenSSHにおける重大なリモートコード実行（RCE）シグナルハンドラのレースコンディション。...
rConfig 3.9.2 - Remote Code Execution
rConfig 3.9.2 is susceptible to a remote code execution vulnerability. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution. id:...
Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. id: CVE-2023-24489 info: name: Citrix ShareFile StorageZones...
ZK Framework - Information Disclosure
ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...
Exploit for CVE-2026-64638
CVE-2026-64638 — Nuclei Detection Template Template Nuclei...
Exploit for Improper Access Control in Widgetfactorylimited Jce
MASTA CVE-2026-48907 Scanner Joomla! JCE 2.9.99.5 Unauthe...
Atlassian Confluence Server - Improper Authorization
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. There is no impact to confidentiality as an attacker cannot exfiltrate any instance data. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an...
WSO2 Management - Arbitrary File Upload & Remote Code Execution
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. This affects WSO2 API Manager 2.2.0 and above through 4.0.0; WSO2 Identity Server 5.2.0 and above through 5.11.0; WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0, and 5.6.0; WSO2 Identity Server as Key...
AirPlay RTSP Device Discovery Scanner
The AirPlay RTSP Device Discovery Scanner is a Metasploit auxiliary module designed to safely identify Apple AirPlay-compatible devices by sending a legitimate RTSP OPTIONS request to the default AirPlay service port 7000/TCP. The module performs non-intrusive service fingerprinting only and does...
WordPress Slider‑Future 1.0.5 Exposure Scanner
This Metasploit auxiliary module is designed to detect exposure of the WordPress Slider‑Future plugin REST endpoint at /wp-json/slider-future/v1/upload-image/. The module performs a non-intrusive HTTP request OPTIONS method to determine whether the endpoint is accessible. It does not upload files...
Context-Aware Offensive Intelligence (CAOI)
This research introduces a new class of post-exploitation intelligence modules for the Metasploit Framework. Unlike traditional modules, these components do not exploit vulnerabilities, escalate privileges, or modify target systems. The modules operate as a contextual intelligence layer that...