CVE-2026-40473

camel-mina MinaConverter.toObjectInput Unsafe Deserialization Reproducer CVE-2026-40473 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-mina component, tracked as CVE-2026-40473. The MinaConverter.toObjectInputIoBuffer type converter wraps the received bytes...

CVE-2024-6333

CVE-2024-6333 - Xerox Authenticated Remote Code Execution Authenticated Remote Code Execution vulnerability in Xerox WorkCentre printers via the Network Troubleshooting Log feature. Description The Network Troubleshooting Log functionality /properties/security/networktroubleshootinglog.php fails ...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...

CVE-2022-47966-Scan

CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...

CVE-2026-61343-poc-librebooking-rce

CVE-2026-61343-poc-librebooking-rce Librebooking Admin RCE PoC CVE-2026-61343...

CVE-2026-47117-openmed-rce

CVE-2026-47117: OpenMed Unauthenticated Remote Code Execution via PII Model Loading Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2026-47103-python-statemachine-rce

CVE-2026-47103: Python StateMachine Remote Code Execution via SCXML eval Injection Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2026-7275-moodle

CVE-2026-7275-moodle PoC & documentation for CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs — Path Traversal / Arbitrary File Write that can lead to RCE on unpatched Moodle versions. Disclaimer: For authorized security research, auditing, and defensive education only. Do not...

Mercury: Unauthenticated Remote Code Execution via /api/kernels

Mercury runs a JupyterLab server with anonymous access by default mercuryapp/main.py sets --IdentityProvider.token='' when no --token/MERCURYTOKEN is given; when tokenless it also sets --ServerApp.disablecheckxsrf=True. It relies on a blocklist mercuryapp/blockhandler.py BLOCKEDPATTERNS: /lab,...

CVE-2025-10585-The-Chrome-V8-Zero-Day

CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today ⚔️🛡️ Google has released an out-of-band patch this week for CVE-2025-10585 , a serious type-confusion vulnerability in Chrome’s V8 JavaScript / WebAssembly engine. The bug is not theoretical — Google’s Threat Analysis Group confirmed...

wordpress-cve-2026-63030

WordPress REST API Batch Route Confusion + SQL Injection → RCE Pre-authentication, unauthenticated, no plugins required. Works against a stock WordPress install via the REST API batch endpoint. | ---|--- CVE| CVE-2026-63030 route confusion → RCE + CVE-2026-60137 SQLi GHSA| GHSA-ff9f-jf42-662q ·...

CVE-2021-41773

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2026-12665 IBM MQ Buffer Overflow

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

EUVD-2026-104465

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-12665

The IBM MQ software is susceptible to a stack buffer overflow (CWE-121) during the channel connection establishment phase. A remote attacker can exploit this vulnerability by providing TLS certificates containing malformed distinguished names , potentially leading to arbitrary code execution . Ex...

CVE-2024-5452

CVE-2024-5452 01. Overview of RCE and pytorch-lightning 1 Overview of RCE and pytorch-lightning RCE Remote Code Execution is a vulnerability that allows an attacker to execute arbitrary code remotely within a system or application, and is classified as CWE-94: Improper Control of Generation of...

CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ https://github.com/user-attachments/assets/403a70f4-4ff4-4ab7-b11c-d73d70adaf0b Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git...

CVE-2026-107188 Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...

CVE-2026-107188

The Eptura Archibus software contains a vulnerability in the Workflow Rule component that allows for unauthenticated arbitrary file upload . An attacker can upload export reports containing malicious JSP code and specify a JSPX file extension. Because the uploaded file is accessible via a web bro...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...