CVE-2026-39987

CVE-2026-39987 — Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...

marimo_CVE-2026-39987_RCE_PoC

CVE-2026-39987 - Marimo This script is ONLY for educational purposes and authorized testing. Unauthorized use of this tool against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this information. 📋 Description Marimo versions prior to 0.23.0 presen...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Oracle E-Business Suite Pre-Auth RCE Exploit A critical pre-authentication Remote Code Execution RCE flaw in Oracle E-Business Suite versions 12.2.3–12.2.14 allows attackers to gain full control over vulnerable servers via malicious HTTP requests — now actively exploited in the...

cve-2026-1731-scanner

CVE-2026-1731 — BeyondTrust RS/PRA Passive Vulnerability Scanner root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ CVE-2026-1731 ║ ║ BeyondTrust RS/PRA Passive Vulnerability Scanner ║ ║ ║ ╠═══════════════════════════════════════════════════════════════╣ ║...

CVE-2026-21643

CVE-2026-21643 Checker & Nuclei Template This repository contains detection tools for CVE-2026-21643 , a pre-authentication SQL Injection vulnerability in FortiClient EMS 7.4.4. The vulnerability exists in the /api/v1/initconsts and /api/v1/auth/signin endpoints, where the Site HTTP header is...

CVE-2021-26084

CVE-2021-26084 Description - POC of CVE-2021-26084, which is Atlassian Confluence Server OGNLObject-Graph Navigation Language Pre-Auth RCE Injection Vulneralibity. - create by antx at 2022-01-13. Detail - In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability...

CVE-2026-1281-Ivanti-EPMM-RCE

CVE-2026-1281 & CVE-2026-1340 - Ivanti EPMM Pre-Auth RCE ⚠️ DISCLAIMER: This PoC is provided solely for educational and security research purposes. Unauthorized use is illegal. 🎯 Description Complete Proof of Concept PoC for exploiting the CVE-2026-1281 and CVE-2026-1340 vulnerabilities affecting...

CVE-2026-33439-PoC

CVE-2026-33439 — OpenAM Pre-Auth RCE Echo Mode Command output directly in the HTTP response — no DNS exfiltration or OOB needed. Uses com.iplanet.jato.RequestManager.getRequestContext to access the active JATO ThreadLocal request/response during deserialization. Works on Java 21+ where classic...

CVE-2026-35616

CVE-2026-35616 — FortiClient EMS Pre-Auth Bypass Proof of Concept PoC for FortiClient Endpoint Management Server authentication bypass CVE-2026-35616 This script exploits an authentication bypass vulnerability in FortiClient EMS that allows unauthenticated access to protected API endpoints...

Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467

Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 Apache OFBiz is an open source enterprise resource planning system. It provides a suite of enterprise applications that integrate and automate many of the business processes of an enterprise. CVE-2023-49070 is a...

CVE-2023-43208

CVE-2023-43208 — Mirth Connect Pre-Auth RCE Pre-authenticated Remote Code Execution in NextGen Healthcare Mirth Connect CVSS 9.8 Critical — Patch bypass of CVE-2023-37679 Overview Mirth Connect uses the Java XStream library to deserialize XML payloads on the /api/users endpoint without...

CVE-2026-39987-lab-or-marimo-cve-lab

CVE-2026-39987 Lab Guide Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass An educational Docker lab for understanding, reproducing, and patching this critical vulnerability in marimo. Table of Contents Overview Architecture Quick Start Step-by-Step Walkthrough Step 1:...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20131 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20131, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

CVE-2025-32433-Detection

CVE-2025-32433 Detection Author: te0rwx Created: 2025-08-27 Upt. 2026-08-16 Description A custom YARA rule for detecting known artifacts associated with CVE-2025-32433 , an Erlang/OTP SSH pre-authentication remote code execution RCE vulnerability. The rule was developed and validated against publ...

CVE-2024-21762

CVE-2024-21762 - Herramienta de detección y explotación de FortiGate SSL VPN RCE Herramienta de detección y explotación para CVE-2024-21762 - Vulnerabilidad crítica en FortiGate SSL VPN ⚠️ AVISO LEGAL : Esta herramienta es exclusivamente para uso en entornos de prueba autorizados. El uso no...

CVE-2026-39987

⚠️ CVE-2026-39987 — Shell sin autenticación en marimo 0.23.0 Una herramienta reactiva de cuadernos de Python dio a los atacantes una shell completa con una sola petición WebSocket. 📌 Resumen CVE-2026-39987 es una vulnerabilidad crítica de RCE sin autenticación previa en marimo — un popular cuadern...

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC Critical RCE Unauthenticated Remote Code Execution in Cisco Secure Firewall Management Center 📌 Overview A critical pre-authentication Java deserialization vulnerability allowing remote attackers to achieve root-level code execution on Cisco FMC appliances. Key...

CVE-2025-51458-exp

CVE-2025-51458-exp Inyección SQL Pre-Auth en DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'"...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...