1060 matches found
react2shell-ultimate
Escáner React2Shell Ultimate v2.0 Escáner profesional de vulnerabilidades RCE RSC Next.js para CVE-2025-66478 🎯 Descripción general React2Shell Ultimate es un escáner integral de vulnerabilidades para CVE-2025-66478: una vulnerabilidad crítica de ejecución remota de código RCE que afecta a...
kube-alien
Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...
uro
uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...
rsc-security-auditor
🛡️ Auditor de Seguridad RSC Detecta vulnerabilidades de seguridad críticas CVE-2025-66478, CVE-2025-55184 en tu stack de Next.js y React Server Components. 🚨 Urgente: Divulgaciones recientes dic 2025 han revelado vulnerabilidades críticas de DoS y RCE en React Server Components. Esta herramienta t...
CVE-2026-27544
Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...
Exploit for CVE-2026-64638
Require...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
RCE (Remote Code Execution) org.bouncycastle:bcprov-jdk18on Dependency in Bamboo Data Center
This High severity RCE Remote Code Execution vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
Photon OS 5.0: Erlang PHSA-2025-5.0-91-0509
An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0509. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for CVE-2026-38426
CVE-2026-38426: strcpy Stack Buffer Overflow in Tasmota fetc...
mcp-stdio-exploit
MCP STDIO Exploit: A Local Reimplementation Vulnerability...
CVE-2026-35518
FTLDNS pihole-FTL provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution RCE vulnerability in the DNS CNAME records configuration parameter dns.cnameRecords. This vulnerability allows a...
CVE-2026-28674
Product/Context: xiaoheiFS (self-hosted financial/operational system). Vulnerability: In versions ≤ 0.3.15, the AdminPaymentPluginUpload endpoint allows admins to upload any file to plugins/payment/ with only a hardcoded password (qweasd123456) and disregards file content. A background watcher (S...
📄 WordPress AI Buddy 1.8.5 Shell Upload
Proof of concept exploit for a shell upload vulnerability in WordPress AI Buddy plugin versions 1.8.5 and below. This exploit is written in PHP. ============================================================================================================================================= | Title :...
📄 WordPress Project Notebooks 1.1.4 Remote Code Execution
Proof of concept exploit for the WordPress Project Notebooks plugin version 1.1.4 remote code execution vulnerability that allows for privilege escalation through improper validation of AJAX actions and nonce exposure...
openSUSE Security Advisory (SUSE-SU-2026:0313-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-0537
The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOWFILEEDIT and DISALLOWFILEMODS settings and upload arbitrary files to the site through the "ajaxsave" function. The file is written relative to the current 's stylesheet directory, and a .php...
CVE-2024-39700
JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...
PT-2025-41532
Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver affected versions not specified Description The NVIDIA Display Driver contains a flaw where an uncontrolled DLL loading path can be exploited. This could lead to arbitrary denial of service, escalation of privileges, code...
