SAP NetWeaver Visual Composer Metadata Uploader - Deserialization

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

NextGen Healthcare Mirth Connect - Remote Code Execution

Unauthenticated remote code execution vulnerability in NextGen Healthcare Mirth Connect before version 4.4.1. id: CVE-2023-43208 info: name: NextGen Healthcare Mirth Connect - Remote Code Execution author: princechaddha severity: critical description: Unauthenticated remote code execution...

CraftCMS < 4.4.15 - Unauthenticated Remote Code Execution

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector leading to Remote Code Execution RCE. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in...

Apache Struts 2.0.0-2.5.25 - Remote Code Execution

Apache Struts 2.0.0 through Struts 2.5.25 is susceptible to remote code execution because forced OGNL evaluation, when evaluated on raw user input in tag attributes, may allow it. id: CVE-2020-17530 info: name: Apache Struts 2.0.0-2.5.25 - Remote Code Execution author: pikpikcu severity: critical...

Apache Struts2 S2-053 - Remote Code Execution

Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1 uses an unintentional expression in a Freemarker tag instead of string literals, which makes it susceptible to remote code execution attacks. id: CVE-2017-12611 info: name: Apache Struts2 S2-053 - Remote Code Execution author: pikpikcu...

VMware Aria Operations for Logs - Unauthenticated Remote Code Execution

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root. id: CVE-2023-20864 info: name: VMware Aria Operations for Logs - Unauthenticated Remo...

CVE-2026-45829

🚨 CVE-2026-45829 - RCE sin autenticación en ChromaDB Ejecución remota de código crítica en la base de datos vectorial ChromaDB 📌 Resumen CVE-2026-45829 es una vulnerabilidad crítica de Ejecución remota de código sin autenticación previa en ChromaDB , una popular base de datos vectorial de IA de...

cosmicsting-cve-2024-34102-exploit

CosmicSting CVE-2024-34102 Exploit Suite Complete exploit suite for CVE-2024-34102 - The CosmicSting XXE vulnerability in Adobe Commerce / Magento 2.4.x. Vulnerability Details CVE : CVE-2024-34102 CVSS 9.8 Type : XML External Entity Injection XXE Impact : Unauthenticated remote file read, SSRF,...

CVE-2026-27384

CVE-2026-27384 CVE-2026-27384 — Escáner de RCE mfunc/eval de W3 Total Cache Plugin: W3 Total Cache Slug del plugin: w3-total-cache ID de CVE: CVE-2026-27384 Puntuación CVSS: 9.8 Crítica Vector CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tipo de vulnerabilidad: Ejecución arbitraria de códig...

react2shell

React2Shell CVE-2025-55182 Next.js: CVE-2025-66478 認証不要のRCE in React Server Components Flight Protocol - PoCエクスプロイト 説明 React Server Components（Flightプロトコル）は、攻撃者が制御する multipart/form-data を、プロトタイプチェーンへのアクセスを検証せずにデシリアライズします。Next-Action ヘッダーを含む単一の認証不要のPOSTリクエストによって、細工された参照チェーン（$1:proto:then +...

CVE-2026-3296

CVE-2026-3296 CVE-2026-3296 is a CVSS 9.8 Critical unauthenticated PHP Object Injection vulnerability in the Everest Forms WordPress plugin CVE-2026-3296 — Everest Forms PHP Object Injection Scanner Plugin: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder Plugin Slug...

CVE-2024-54887-PoC

CVE-2024-54887 TypeScript PoC Этот репозиторий содержит переписанный на TypeScript ts-node публичный Python PoC для CVE-2024-54887 аутентифицированное RCE на TP-Link TL-WR940N v3/v4. Предварительные требования Node.js 20+ Установка root@kitploit: npm install Использование root@kitploit: npx ts-no...

CVE-2023-49440

CVE-2023-49440-POC root@kitploit: Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...

aapanel-ws-bypass

aaPanel: Los proveedores no siempre corrigen las cosas correctamente Una corrección incompleta para CVE-2021-37840 sigue exponiendo 3,6 millones de servidores a RCE como root, 5 años después Descubierto por: EON Security CVE: Pendiente de asignación CVSS: 8.8 Alta —...

CVE-2026-39949

CVE-2026-39949: Authenticated Remote Code Execution in Cacti Through Host Variable Injection Summary An OS command injection vulnerability in Cacti ≤ 1.2.30 allows any authenticated user with device and graph template creation privileges to execute arbitrary commands on the underlying server. The...

CVE-2026-41179

CVE-2026-41179 — rclone RC API Unauthenticated RCE ⚠️ EDUCATIONAL PURPOSES ONLY This repository is intended strictly for security research, education, and authorized lab environments. PSSec and the contributors of this repository do not condone, support, or take any responsibility for any...

CVE-2026-33453

Reproductor de la vulnerabilidad de inyección de cabeceras → RCE en camel-coap CVE-2026-33453 Este proyecto demuestra una vulnerabilidad de inyección de cabeceras de mensajes Camel en el componente camel-coap de Apache Camel, registrada como CVE-2026-33453. Un atacante no autenticado que pueda...

CVE-2025-68664-LangGrinch-PoC

📑 Índice 🎯 Resumen Ejecutivo 📂 Estructura del Proyecto 🚀 Inicio Rápido...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 y CVE-2025-40553 Cadena RCE Pre-Auth en SolarWinds Web Help Desk Herramienta generadora de artefactos de detección para la cadena RCE Pre-Auth en SolarWinds Web Help Desk Descripción Este generador de artefactos de detección verifica si una instancia de SolarWinds Web Help Desk es...

CVE-2026-49869

Escáner de Kestra CVE-2026-49869 / CVE-2026-53576 Escanea instancias de Kestra para detectar la omisión del filtro de autenticación endsWith"/configs". El AuthenticationFilter.java de Kestra verifica request.getPath.endsWith"/configs" en lugar de coincidir con la ruta exacta /api/v1/configs. Dado...