EUVD-2026-89889

Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...

CVE-2026-96837 WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability

Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...

CVE-2026-96837 WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability

Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...

CVE-2026-96831

The Themify Builder plugin for WordPress, version 7.8.1 and below , is vulnerable to a PHP Object Injection flaw. The vulnerability allows an attacker to potentially compromise the system's integrity, confidentiality, and availability. While the provided documents confirm the existence of the vul...

CVE-2026-94389 WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in AcyMailing SMTP Newsletter = 11.0.5 versions...

nextjs-rce-incident-response

Next.js RCE Incident Response — CVE-2025-55182 Type: Live Production Incident Response Vulnerability: CVE-2025-55182 — React Server Components Insecure Deserialization RCE Affected System: Next.js frontend + remote production server Role: Cyber Security Intern — SenseLive Technologies Date:...

CVE-2026-90847

Overview iuxset.cgi contains an authenticated remote code execution RCE vulnerability via file upload. It lives in the function that's invoked when iuxset.cgi is called with tmenu=camera and smenu=systemsetup, which maps to Camera Management → System Setup in the administrator web UI. Although it...

internet-of-vulnerable-things

Internet of Vulnerable Things The results of my small term paper on the topic of the Internet of Vulnerable Things. Abstract This paper provides a practical demonstration of how insecure the Internet of Things is by hacking a typical IoT device. Several vulnerabilities were identified in the...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 Exploit toolkit CVE-2017-0199 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victi...

CVE-2023-22496-PoC

CVE-2023-22496 — Netdata Agent OS Command Injection PoC Severity : Critical CVSS 9.8 Affected : Netdata Agent Fixed in : v1.37.0 Type : OS Command Injection CWE-78 Overview CVE-2023-22496 is an OS command injection vulnerability in Netdata's health alarm notification system. The registryhostname ...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE Exploit CVE-2026-38751 Overview This Python script exploits a Remote Code Execution vulnerability in OpenSTAManager version 2.10, identified as CVE-2026-38751. The exploit allows authenticated users to upload a malicious module and execute arbitrary commands on the target syste...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...

CVE-2026-6951

CVE-2026-6951 simple-git 원격 코드 실행 ★ CVE-2026-6951 simple-git --config 옵션 필터 우회 RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 개요 CVE-2026-6951 은 CVE-2022-25912에 대한 불완전한 수정으로 인해 발생한 simple-git의 원격 코드 실행 취약점입니다. -c 옵션은 차단되었지만, 동등한 --config 옵션은 제대로 제한되지...

CVE-2026-49869

CVE-2026-49869: Kestra 인증되지 않은 원격 코드 실행 ★Kestra OSS AuthenticationFilter의 인증 우회에 대한 PoC 및 Docker 랩★ 본인이 통제하는 시스템에서만 이 랩을 실행하십시오. -p 8080:8080 예시는 취약한 API를 모든 호스트 인터페이스에 게시할 수 있으므로, 다른 네트워크로부터의 접근을 차단하십시오. https://github.com/user-attachments/assets/e8dc29f2-1fd2-49bb-9a61-3ae67ee69865 개요 Kestra는...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE ⚠️ EDUCATIONAL PURPOSES ONLY — Use on real systems is prohibited. 📋 Project Overview / Project Overview Prepared as part of the BGT-Pentest-LAB cybersecurity final project. Xiaomi HyperOS System Updater...

CVE-2026-40897

CVE-2026-40897 Math.js 式パーサーにおけるリモートコード実行 ★ CVE-2026-40897 Math.js におけるリモートコード実行のPoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 概要 CVE-2026-40897 は、Math.js の式パーサーにおける サンドボックスバイパスによるリモートコード実行 の脆弱性です。 isSafeProperty...

CVE-2026-39987-Marimo-Preauth-RCE

CVE-2026-39987 Marimo 認証前 RCE 調査 概要 本プロジェクトは、Marimo のターミナル WebSocket エンドポイント /terminal/ws に関連する認証前リモートコード実行脆弱性である CVE-2026-39987 に焦点を当てています。 Marimo は、ユーザーが Web インターフェースを通じて Python コードを記述および実行できるオープンソースのリアクティブ Python...

CVE-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify This repository contains documentation and analysis for CVE-2026-34038 , a critical command injection vulnerability in Coolify. Summary An authenticated remote command injection vulnerability CWE-78 in Coolify allows users with...

cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC consider this to chain CVE-2019-5418! Pairs lovely with CVE-2019-5418! POC Screenshot 🚨 Warning This repository contains a proof-of-concept PoC exploit demonstrating remote code execution RCE in Ruby on Rails applications via...

CVE-2026-93995 Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...