DEBIAN-CVE-2026-100695

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

CVE-2026-100682

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink validation. Attackers with BUILDER role can craft a malicious ZIP with leaf symlink entries followed by duplicate file entri...

CVE-2026-100639

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/gutter/index.ts from content pasted as plain-text Markdown containing a Kramdown inline attribute list IAL. Because the...

CVE-2026-100613

capgo.app is an over-the-air OTA update platform for Capacitor apps. In all versions up to and including the current release no patch available at time of publication, the transferapp database function transfers an app, its channels, versions and related records to a destination organization...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 POC 示例 由 BurpRoot 提供 CVE-2022-24086：概述 受影响软件：Magento2 CVE ID：CVE-2022-24086 CVSS 评分：9.8（严重） 描述 CVE-2022-24086 是一个影响多个版本 Magento2 电商平台的关键安全漏洞。该漏洞允许未经身份验证的攻击者在服务器上执行任意代码，从而未经授权访问敏感数据，并可能控制受影响的系统。 受影响版本 该漏洞影响以下 Magento2 版本： Magento2 版本 2.4.3-p1（及更早版本）和 2.3.7-p2（及更早版本） 影...

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerabilidad es una vulnerabilidad RCE en eval-stdin.php desactualizado. Este exploit es solo una automatización para la vulnerabilidad mencionada y aún está en desarrollo. Escrito en Ruby 3.0.4 en 2 horas, probado en Kali linux, Arch Linux, Ubuntu minimal ...

redis-stack-CVE-2024-55656

CVE-2024-55656 - Redis Stack - Vulnerabilidad de desbordamiento de enteros en RedisBloom que permite ejecución remota de código Título: Vulnerabilidad de desbordamiento de enteros en RedisBloom de Redis Stack que permite ejecución remota de código ZDI: ZDI-25-009 CVE: CVE-2024-55656 Créditos:...

CVE-2016-6366

CVE-2016-6366 针对 EXTRABACON 漏洞利用的公开改进库，这是一个由方程集团（NSA）编写并由影子经纪人泄露的 Cisco ASA 远程代码执行漏洞。 包含改进的 shellcode、一个 LINA 偏移量查找脚本、一个 Metasploit 模块，以及 extrabacon-2.0。 我们将在不久的将来，在对所有版本进行真实硬件测试后，为大多数 8.x 和 9.x 版本添加补丁。 该版本使用了改进的 shellcode，阶段数少于方程集团版本，因此更加可靠。这将 SNMP 载荷包减少了约 150 字节。此外，泄露的版本仅支持 8.x，而我们已经使其在 9.x...

CVE-2026-94132

The AcyMailing Enterprise extension for Joomla (versions 1.0.0 – 11.0.5 ) contains a Remote Code Execution (RCE) vulnerability. The root cause is that the mailbox actions in POP3 mode save incoming MIME attachments to the media/com_acym/upload/ directory without performing extension checks. This ...

CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

EUVD-2026-87772

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

l4j-tp1

log4shell verdadero positivo Este es un proyecto web simple con una vulnerabilidad log4shell. El proyecto define un servicio get scabench.HelloWorldService que devuelve una cadena de texto plano hello world. El servicio no espera parámetros, y si se encuentran parámetros, se registra un error. La...

POC-CVE-2025-68613

Descripción Código de exploit PoC para la vulnerabilidad RCE autenticada en N8N CVE-2025-68613 Uso python3 poc.py -u -c...

BIG-IP-F5-TMUI-RCE-Vulnerability

BIG-IP-F5-TMUI-RCE-Vulnerability CVE-2020-5902 Vulnerabilidad de ejecución remota de código RCE en TMUI de BIG-IP F5: PoC/script de prueba...

CVE-2021-41773

CVE-2021-41773 一个简单的bash POC脚本，用于Apache 2.4.49中的路径遍历和远程代码执行漏洞 使用示例： 设置一个netcat监听器： $ nc -nvlp 然后运行脚本： $ ./exploit.sh 免责声明 此工具仅用于教育目的。我对任何滥用行为不承担责任。...

POC-CVE-2012-1831

POC-CVE-2012-1831 针对CVE-2012-1831的概念验证 Kingview Touchview 6.53 Kingview背景 KingView® 是一款基于Windows的强大工业SCADA软件，用于监控和控制工业过程。经过超过25年的发展，它现在被誉为中国市场上最畅销的自动化软件，并在国际上拥有庞大的用户群。 CVE描述 CVE-2012-1831 是 WellinTech KingView 6.53 中一个基于堆的缓冲区溢出漏洞，允许远程攻击者通过向TCP端口555发送特制数据包来执行任意代码。 CVSS: 10.0 严重 POC 报告进行中...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE PoC simple...

CrafterCMS-CVE-2025-6384

CrafterCMS Autenticado RCE - Bypass de Sandbox de Groovy CVE-2025-6384 Una Prueba de Concepto para una vulnerabilidad de Ejecución Remota de Código autenticada en CrafterCMS. Resumen de la Vulnerabilidad Un usuario autenticado con privilegios de desarrollador puede eludir el sandbox de scripts...

D-Link

CVE-2024-10914 Ejecución Remota de Código RCE en D-Link D-Link NAS- Inyección de Comandos a través del Parámetro Name CVE-2024-10914:- Se encontró una vulnerabilidad en D-Link DNS-320, DNS- 320LW, DNS-325 y DNS-340L hasta 20241028. Ha sido declarada como crítica. La función afectada por esta...