506 matches found
CVE-2018-11776
Vulnerable docker container for CVE-2018-11776 docker pull bhdresh/cve-2018-11776:1.0 docker run -dit -p :8080:8080 bhdresh/cve-2018-11776:1.0 PoC PoC - 1 Request : http://:8080/struts2-showcase-2.3.14/$333+333/help.action Result : http://:8080/struts2-showcase-2.3.14/666/help.action PoC - 2...
CVE-2025-48384-test
Reproduce Command Line git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub $printf "sub\r" git config unset -...
CVE-2026-31156
CVE-2026-31156 There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters passed in from the command line. Attackers can read any readable file by constructing malicious paths, posing a risk of information...
llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection
CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecode Proof of concept for CVE-2026-58116 CVSS 9.8 Critical: remote code execution in LLaMA-Factory = v0.9.5. The LLaMA-Factory WebUI hardcodes trustremotecode=True when loading a model src/llamafactory/webui/chatter.py:139 and...
cve-2024-32002-poc
💥 CVE-2024-32002 – Git Submodule Path Injection PoC Motivation While solving the Compiled machine on the Hack The Box platform, I came across a curious behavior involving Git and submodules. Upon investigating further, I found this excellent post by researcher Amal Murali, which details a path...
CVE-2026-82819
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
EUVD-2026-107041
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
CVE-2026-82819 Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
CVE-2026-82819
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By providing a malicious SMB share path, an attacker can trigger authentication coercion against the underlying server, leading to the leakage of the Cerberus ...
CVE-2026-3288-lab
CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Controller Configuration Injection ⚠️ WARNING : This lab contains intentionally vulnerable configurations for AUTHORIZED SECURITY TRAINING ONLY Vulnerability Overview CVE-2026-3288 CVSS 8.8 HIGH - Configuration injection in NGINX Ingress Controller...
PT-2026-120442
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
CVE-2026-113715
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...
CVE-2026-113715
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...
EUVD-2026-105301
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...
CVE-2026-113715
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...
CVE-2024-32019_poc
Privilege Escalation via ndsudo Netdata Local Exploit This is an alternative POC to exploit a vulnerable ndsudo utility bundled with Netdata to perform a local privilege escalation. The exploit works by adding the script inside the user’s PATH substituting an allowed command nvme by ndsudo and...
PT-2026-118623
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...
Linux Distros Unpatched Vulnerability : CVE-2026-103930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::openstream in httplib.h accepts a caller-controlled path that reaches...
EUVD-2026-41876
swoosh has email-derived URL path injection in Microsoft Graph endpoint...
swoosh has email-derived URL path injection in Microsoft Graph endpoint
Summary Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path /users/from/sendMail without percent-encoding or validation. In applications that derive the from address from untrusted or user-influenced input a...