303461 matches found
Citrix NetScaler ADC and Gateway DTLS Vulnerability Scanner
Citrix NetScaler ADC and NetScaler Gateway versions before 14.1-73.37 and 13.1-64.23 contain a DTLS memory overflow vulnerability that may lead to remote code execution or denial of service. This tool fingerprints exposed services, assesses build versions, and optionally sends a DTLS probe...
The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) access control systems, related to insufficient input data validation, allows attackers to execute arbitrary commands.
The vulnerability of NetScaler ADC formerly Citrix ADC and the NetScaler Gateway access control system formerly Citrix Gateway is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
MiracleLinux 9 : unbound-1.24.2-3.el9_8.8 (AXSA:2026-1924:15)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1924:15 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC...
CVE-2026-12342: Improper Input Validation
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content...
CVE-2026-101894: Improper Limitation of a Pathname to a Restricted Directory
The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompressinput, output API relies on lexical containment checks that do not account for the kernel following a planted symlink chain. An attacker can supply a crafted archive containing chained symlink...
CVE-2026-12268: Improper Input Validation
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
ALSA-2026:72279 Critical: ipa security, bug fix, and enhancement update
AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ip...
RHEL 7 : gstreamer1-plugins-good (RHSA-2026:72367)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:72367 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...
PT-2026-99849
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central versions prior to 6201 Description An issue exists that allows PowerShell command injection during the Windows DNS SPF/TXT record push process, which can lead to remote code execution. Recommendations Update ManageEngi...
0-click-RCE-Exploit-for-CVE-2024-10924
CVE-2024-10924 / Auth Bypass 2FA to RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859061671852909055 This repository contains a proof-of-concept exploit for CVE-2024-10924, an authentication and 2FA bypass vulnerability in the Really Simple Security WordPress plugin tha...
CVE-2025-55182
🛡️ CVE-2025-55182 - Understand and Mitigate a Vulnerability 🚀 Getting Started Welcome to the CVE-2025-55182 project. This guide will help you understand the vulnerability and provide steps to download and run the software you need. 📥 Download the Application 🔍 What is CVE-2025-55182? CVE-2025-5518...
CVE-2026-14266
CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip ≤ 26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...
CVE-2025-48593
CVE-2025-48593: Zero-Click Remote Code Execution in Android System Author: LAKSHMIKANTHAN K letchupkt Date: November 2025 Severity: Critical A critical zero-click remote code execution vulnerability affecting Android 13-16 devices. Vulnerability Overview Attribute| Details ---|--- CVE ID|...
CVE-2025-53770
CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...
CVE-2026-33454
camel-mail Header Injection → RCE Vulnerability Reproducer CVE-2026-33454 This project demonstrates a Camel message header injection vulnerability in Apache Camel's camel-mail component, tracked as CVE-2026-33454. An attacker who can deliver an email to a mailbox monitored by a Camel mail consume...
Tor-0day-JavaScript-Exploit
CVE-2024-9680 - TOR Browser 0day Exploit UAF Use-After-Free in Animation Timelines - Remote Code Execution Vulnerability Actively exploited in the wild targeting Tor Browser users View Analysis • Official CVE Overview This repository contains a comprehensive analysis and educational demonstration...
salt-rce-scanner-CVE-2020-11651-CVE-2020-11652
1 What is it? Scanning tool to test for SaltStack vulnerabilities CVE-2020-11651 & CVE-2020-11652. The vulnerabilities allow an attacker who can connect to the "request server" port to bypass all authentication and authorization controls and publish arbitrary control messages, read and write file...
exploit-CVE-2017-6090
Containerized exploitable CVE-2017-6090 This projects builds a container running PhpCollab 2.5.1, containing a remote code execution vulnerability as detailed in CVE-2017-6090. In addition, there is a docker-compse file to start that container and mysql to show the demo, and instructions to explo...
PHPUnit_eval-stdin_RCE
PHPUniteval-stdinRCE CVE-2017-9841 PHPUniteval-stdinphp Remote Code Execution A code injection vulnerability in PHPUnit, a PHP unit testing framework which part of the Mailchimp , Mailchimp E-Commerce moduels in Drupal The vulnerability within the /phpunit/src/Util/PHP/eval-stdin.php file through...