Micro Focus Operations Bridge Reporter - Remote Code Execution

Micro Focus Operations Bridge Reporter 10.40 is susceptible to remote code execution. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or execute unauthorized operations without entering necessary credentials. id: CVE-2021-22502 info: name: Micro Focus...

F5 BIG-IP - Unauthenticated RCE via AJP Smuggling

CVE-2023-46747 is a critical severity authentication bypass vulnerability in F5 BIG-IP that could allow an unauthenticated attacker to achieve remote code execution RCE. The vulnerability impacts the BIG-IP Configuration utility, also known as the TMUI, wherein arbitrary requests can bypass...

Adobe ColdFusion - Deserialization of Untrusted Data

Adobe ColdFusion versions 2018u17 and earlier, 2021u7 and earlier and 2023u1 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-38203 info: name:...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

Adobe ColdFusion - Access Control Bypass

An attacker is able to access every CFM and CFC endpoint within the ColdFusion Administrator path /CFIDE/, of which there are 437 CFM files and 96 CFC files in a ColdFusion 2021 Update 6 install. id: CVE-2023-29298 info: name: Adobe ColdFusion - Access Control Bypass author:...

ZK Framework - Information Disclosure

ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...

Embedthis GoAhead <3.6.5 - Remote Code Execution

description: Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. id: CVE-2017-17562 info: name: Embedthis GoAhead 3.6.5 - Remote Code Execution author: geeknik severity: high description: | description: Embedthis GoAhead before...

CVE-2026-73570

CVE-2026-73570 Zimbra — Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

CVE-2025-62215_analysis

CVE-2025-62215 Vulnerability Analysis Windows Kernel Race Condition / Double-Free Privilege Escalation の脆弱性調査プロジェクト。 Overview Item| Detail ---|--- CVE| CVE-2025-62215 Component| Windows Kernel ntoskrnl.exe Type| Race Condition CWE-362 / Double Free CWE-415 Impact| Local Privilege Escalation →...

fortra-goanywhere-mft-vulnerability-detection

Fortra GoAnywhere MFT Vulnerability Detection Nuclei templates for detecting Fortra GoAnywhere MFT vulnerabilities. Created by@rxerium Overview CVE detection templates for Fortra GoAnywhere Managed File Transfer MFT, including multiple CISA KEV vulnerabilities exploited by ransomware groups...

CVE-2026-34910-PoC

CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE & File Read Unauthenticated Command Injection RCE CVE-2026-34910 + Path Traversal Arbitrary File Read CVE-2026-34909 in UniFi OS Server. CVSS 10.0 Critical each · CISA KEV listed · actively exploited by a Mirai-derived botnet azsxd...

CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Metabase — Unauthenticated SQL Injection → Full Administrator Takeover 📌 Overview CVE-2026-72898 is a maximum-severity CVSS 10.0 unauthenticated SQL injection vulnerability in Metabase that allows a remote attacker to inject arbitrary SQL into the...

CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File Write Path Traversal -orange 📋 Description CVE-2026-20262 is a Path Traversal CWE-22 vulnerability in the web interface of Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage. It allows an authenticated attacker with write permission...

VulnCheck KEV: CVE-2026-86218

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14...

CVE-2026-72898

CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection Metabase Pre-Authentication SQL Injection Leading to Admin Takeover Proof-of-concept for CVE-2026-72898, a critical unauthenticated SQL injection in Metabase's password-reset endpoint. The PoC injects a forged admin session row into the...

CVE-2026-86060

creationtimestamp| type| source ---|---|--- 2026-09-05 20:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muse5uamk62w 2026-09-05 21:41:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7hz5v6cd2tn4v 2026-09-05 22:00:02+00:00| exploited|...

CVE-2026-67276

creationtimestamp| type| source ---|---|--- 2026-09-05 20:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muse5sihmx2j 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4974c0db-04af-472f-a69e-78bc275e7d1b 2026-09-...

CVE-2026-67277

creationtimestamp| type| source ---|---|--- 2026-09-05 20:20:30+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117220286803293141 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d9ea784-c941-41ec-aa5f-c1cb172bcb68 2026-09-0...

CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-

CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ ADVERTENCIA : Este script es solo para fines educativos y de prueba en entornos autorizados. El uso no autorizado está prohibido y puede ser ilegal. 📋 Descripción...

ghe-push-option-rce-scanner

CVE-2026-3854 — GitHub Enterprise Server RCE via Push Option Injection Overview Improper neutralization of push option values in GHE. Attacker with push access achieves RCE on the instance. Field| Value ---|--- CVE| CVE-2026-3854 Severity| CRITICAL Product| GitHub Enterprise Server CISA KEV|...