mIRC-CVE-2019-6453

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Link to the write-up We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument...

CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642

The Ghost Node.js content management system is vulnerable to Remote Code Execution (RCE) in versions 6.56.0 through 6.67.0 . The root cause is a vulnerability in the SVG handling of an image processing library bundled with the software. A staff user, such as a Contributor , can trigger this by cr...

exploit-cve-2018-7448

exploit-cve-2018-7448 Purpose This is a python script to automate CMS Made Simple 2.1.6 - Remote Code Execution - CVE-2018-7448. It was created based on https://www.exploit-db.com/exploits/44192. Usage python3 exploit-CVE-2018-7448.py -t 127.0.0.1/cmsms -d cms -u root -p password Troubleshooting ...

Torito-R2S

Torito React2Shell Scanner & Exploit Tool CVE-2025-55182 / 66478 Detection-first scanner for Next.js RSC targets with optional PoC confirm and exploit/shell modes. Use only on systems you are authorized to test. Requirements Python 3.9+ pip install -r requirements.txt Subfinder binary in PATH for...

EUVD-2026-92613

In cfg2prop of btifstorage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58835

In cfg2prop of btifstorage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58835

A heap buffer overflow in the cfg2prop function of btif_storage.cc allows for an out-of-bounds write . This vulnerability could lead to remote code execution without requiring additional execution privileges or user interaction. No specific details regarding affected software versions or remediat...

CVE-2026-49878

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49878

A logic error in the wpas_handle_robust_av_scs_recv_action function within robust_av.c results in a possible out-of-bounds write . This vulnerability could potentially lead to remote code execution requiring System execution privileges . Exploitation does not require user interaction. No specific...

EUVD-2026-92600

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

cve-2020-00796

Identifying and Mitigating the CVE-2020–0796 flaw in the fly CVE-2020–0796, is pre-remote code execution vulnerability that resides in the Server Message Block 3.0 SMBv3 network communication protocol, which Microsoft will not address the issue as the part of the March 2020 Tuesday. Usage python3...

CVE-2022-26809

CVE 설명 CVE-2022-26809 - 핵심 Windows 구성 요소RPC의 취약점으로, CVSS 점수 9.8을 받은 데에는 이유가 있습니다. 공격에 인증이 필요하지 않고 네트워크를 통해 원격으로 실행될 수 있으며, RPC 서비스의 권한으로 원격 코드 실행RCE이 가능합니다. RPC 서비스의 권한은 RPC 런타임을 호스팅하는 프로세스에 따라 달라집니다. 약간의 운이 따르는 이 치명적인 버그는 패치되지 않은 SMB를 실행하는 Windows 호스트에 접근할 수 있게 해줍니다. 이 취약점은 네트워크 외부에서 침입하기 위해, 그리...

CVE-2024-25600

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-25600 Exploit WordPress plugin Bricks Builder has RCE vulnerability CVE-2024-25600 WordPress plugin Bricks Builder RCE vulnerability CVE-2024-25600 exploit script, multi-POC hybri...

-CVE-2014-6271

/ || | | | | | | | / || | | |/ \ / | |/ / \ | || | | | | | | \ | || | | | | | | ' / | | || || | | | || | || . \ |/|| |||||/|| ||/ ||\ CVE-2014-6271 — Shellshock Bash 환경 변수 주입을 통한 원격 코드 실행 "수십 년 동안 Bash에 숨겨져 있다가 24시간도 안 되어 인터넷의 기초를 뒤흔든 결함." 목차 Shellshock란 무엇인가? 타임라인 영향을 받는 시스템 기술적 설명 PoC — 개념...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Code‑Projects 호텔 및 관광 예약 1.0 SQL 인젝션 익스플로잇 -orange -red 완전한 기능의 멀티스레드 시간 기반 블라인드 SQL 인젝션 익스플로잇 CVE-2026-14762. Code‑Projects 호텔 및 관광 예약 애플리케이션버전 1.0의 /admin/rooms.php 엔드포인트를 대상으로 합니다. 전체 데이터베이스 열거, 파일 시스템 읽기LOADFILE, 임의 파일 쓰기INTO OUTFILE / DUMPFILE를 수행하여 웹셸 배포를 통한 원격 코드 실행으로 이어집니...

cve-2018-12386

Firefox 샌드박스 RCE 익스플로잇 CVE-2918-12386 CVE-2018-12386 취약점에 대한 간단한 익스플로잇입니다. Niklas Baumstark, Samuel Groß, Bruno Keith가 발견했습니다. 이것은 대체로 제가 재미로 만든 Poc입니다. 샌드박스 우회는 없으며, 익스플로잇에 사용되는 오프셋이 이미 알려진 특정 Linux 환경에서만 작동합니다 오프셋은 exploit/offsets.js에서 변경할 수 있습니다. 이 익스플로잇은 Firefox 62.0.3 및 Firefox ESR 60.2.2 이전...

CVE-2024-26304-RCE-exploit

CVE-2024-26304 - Remote Code Execution Vulnerability in ArubaOS Overview CVE-2024-26304 is a critical remote code execution RCE vulnerability affecting ArubaOS due to a buffer overflow in its L2/L3 Management service. An attacker can exploit this by sending specially crafted packets to the PAPI...

CSPOC

Cobalt Strike 저장형 XSS RCE CVE-2022-39197 실행 매개변수: -u: Cobaltstrike HTTP 청취 주소, 예: http://127.0.0.1:8500 -p: Payload, 예: 너무 길지 않아야 합니다 데모: 빌드 명령: go build -ldflags "-s -w" QQ 그룹: 클릭하여 가입: 528118163 그룹 가입 / 협력 / 연락 왼쪽 | 공식 계정: 遮天实验室 오른쪽...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - 임의 파일 업로드 익스플로잇 CVE-2024-56264 개요 이 저장소는 WordPress ACF City Selector 플러그인버전 = 1.14.0에서 발견된 임의 파일 업로드Arbitrary File Upload 취약점인 CVE-2024-56264 에 대한 익스플로잇을 포함하고 있습니다. 이 취약점으로 인해 공격자는 취약한 WordPress 인스턴스에 악성 PHP 파일웹 셸을 업로드하고 서버에서 임의 명령을 실행할 수 있습니다. CVE 세부 ...