Exploiting-Samba-on-Metasploitable-2

Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...

CVE-2026-13248

The Honeywell PD45 Industrial Printer (firmware version F10.19.010040 ) contains an Authenticated Remote Code Execution vulnerability within the web management interface. The root cause allows an authenticated user with admin or itadmin account privileges to submit commands written in the Interme...

CVE-2026-13248 Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface

An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version...

EUVD-2026-86385

An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version...

CVE-2026-13249

The Honeywell PD45 Industrial Printer (version F10.19.010040 ) is vulnerable to an unauthenticated Remote Code Execution (RCE) via Arbitrary File Upload in its web management interface. This flaw allows an attacker to upload and execute malicious files or commands without any authentication. To r...

EUVD-2026-86350

An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F10.19.010040, allows upload of attacker controlled files without requiring authentication. An attacker could potentially exploit this...

CVE-2026-34197-payload-Apache-ActiveMQ-

ActiveMQ Jolokia RCE Vulnerability Reproduction Guide This repository provides a remote code execution RCE vulnerability reproduction environment and exploitation script based on the exposed Jolokia API endpoint /api/jolokia/ of Apache ActiveMQ. By invoking the addNetworkConnector operation, it...

CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127-Cisco SD-WAN Pre-Authentication Remote Code Execution Overview This repository contains a proof-of-concept PoC exploit for CVE-2026-20127 , a critical pre-authentication remote code execution RCE vulnerability affecting Cisco Catalyst SD-WAN Controller formerly vSmart and Cisco...

CVE-2026-5027

CVE-2026-5027 - Langflow Path Traversal to Remote Code Execution Description Langflow versions up to and including 1.8.4 do not sanitize the filename parameter in the POST /api/v2/files endpoint. An attacker can use path traversal sequences ../ to write files to arbitrary locations on the...

CVE-2026-25053

CVE-2026-25053 Read: https://yadhu.in/2026/02/09/Breaking-Down-the-n8n-Git-Node-Vulnerability-CVE-2026-25053-Remote-Code-Execution/...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Unauthenticated Arbitrary File Upload. Description : The Ninja Forms - File Uploads plugin for WordPress is vulnerable to unauthenticated arbitrary file upload due to missing file type validation and missing capability checks in the...

gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

cve-2021-41773

cve-2021-41773 Run the Server $ docker build -t cve-2021-41773 . $ docker run --rm -d -p 80:80 cve-2021-41773 Exploitation curl --data "echo;id" 'http://localhost/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd' Root Cause Misconfiguration in the httpd.conf file combined with Path traversal = RCE...

halo-2.25.4-CVE-2026-67919

Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...

CVE-2026-96745

A flaw was found in php-pecl-mongodb. In applications utilizing command monitoring, the driver deserializes class names embedded within document content when creating monitoring event objects. An unauthenticated remote attacker can exploit this flaw by providing crafted input during database...

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- iniciar sesión como administrador 2- ir a la página de edición de cualquier módulo 3- inspeccionar el elemento de cualquier radiobox con valor true 4- cambiar true a true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- hacer clic en actualizar 6- para ejecutar el...