CVE-2026-49009

▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀░...

cve-2026-39440-funnelforms-fix

CVE-2026-39440 FunnelForms Fix A drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro ≤ 3.8.1 to mitigate Remote Code Execution CVE-2026-39440, CVSS 9.9. The Vulnerability Field| Value ---|--- CVE ID| CVE-2026-39440 CVSS Score| 9.9 Critical Affected|...

Tough-Cookie-v2.5.0-Patched

Tough-Cookie v2.5.0 Patched - Prototype Pollution Fix Overview This repository contains a patched version of the tough-cookie package, version 2.5.0, to address the critical Prototype Pollution vulnerability CVE-2023-26136. The vulnerability allows attackers to manipulate the prototype chain by...

CVE-2024-27956-RCE-File-Package

CVE-2024-27956-RCE File Package Contents: 1. exploit.py Original Creator:https://GitHub.com/diego-tella 2. modifiedexploit.py Modified with an ignore ssl verification option 3. Screenshot 4. wpValvePressplugin.py Python script using URI parameters to search for vulnerable wp plugin...

log4shell-mitigation

Details and Mitigation Strategy for log4j2 RCE Vulnerability Visit this Youtube video for additional details. https://youtu.be/jqWdwTeGRK0 This is a quick post on the mitigation for CVE-2021-44228 Security Vulnerability aka Log4Shell and LogJam found in log4j2 Disclaimer All the information and...

CVE-2018-16341

CVE-2018-16341 Nuxeo Authentication Bypass Remote Code Execution 10.3 using a SSTI - CVE-2018-16341 Detailed analysis not english : https://www.freebuf.com/vuls/193000.html https://blog.riskivy.com/nuxeo-rce-analysis-cve-2018-16341/ Security Advisory :...

go-get-RCE

go-get-RCE This is the exploit of CVE-2018-6574: go get RCE This vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system installing their malicious library. This is a good example of a vulnerability that can be exploited using typosquatting to gain co...

hacktivity-vulns-exploits-lab

Vulnerabilities, Exploits, and Remote Access Payloads — lab writeup My walkthrough and analysis of the Hacktivity Cyber Security Labs sheet "Vulnerabilities, Exploits, and Remote Access Payloads" Ethical Hacking and Penetration Testing course, Leeds Beckett University. It covers how software...

CVE-2022-2992

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...

CVE-2026-22738

CVE-2026-22738 Reproduction Environment Vulnerability Description CVE-2026-22738 is a SpEL Spring Expression Language injection vulnerability in Spring AI SimpleVectorStore that can lead to unauthenticated remote code execution RCE. Affected Versions Artifact| Affected Versions| Fixed Versions...

CVE-2024-25293

MJML Local Code Execution PoC A Proof-Of-Concept for CVE-2024-25293 vulnerability. mjml-app v3.0.4 & 3.1.0-beta was discovered to contain a remote code execution RCE In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python fi...

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · OS Command Injection → RCE Researcher: K Disclosure Type: Responsible Disclosure Status: Patched Affected Product: Chamilo LMS 2.0 Confirmed on v1.11.32 📋 Vulnerability Summary Field| Details ---|--- Product| Chamilo LMS Affected Version| 2.0 Confirmed on v1.11.32...

CVE-2017-11610

Supervisord Remote Command Execution Vulnerability Script CVE-2017-11610 Vulnerability Overview Supervisor is a process management tool written in Python, which can be used to start, restart auto-restart programs, and stop processes not just Python processes on UNIX-like systems Windows is not...

bludit-CVE-2019-17240

bludit-CVE-2019-17240 Bypass bludit mitigation login and upload malicious to call a rev shell...

CVE-2019-7214

CVE-2019-7214 Exploit Title: SmarterMail...

CVE-2024-3400

CVE-2024-3400 PoC for educational purposes only. only use on servers you have permission to test. How-To-Use deps: $ pip install rich scan targets.txt： $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36... - Checking...

CVE-2023-0669-Analysis

CVE-2023-0669 This Repo contain the pcakages and scripts used in this Analysis https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-goanywhere The vulnerable version of GoAnywhere for Linux https://www.dropbox.com/s/j31l8lgvapbopy3/ga703linuxx64.sh?dl=0...

Grav-CMS-RCE-Authenticated

Grav CMS Remote Code Execution Authenticated - CVE-2024-28116 Info This code is an adaptation fromGraver Github repository with some improvements based on this video. Exploit against Grav CMS for versions below 1.7.45 based on SSTI + RCE vulnerabilities, labeled as CVE-2024-28116. This script...

CVE-2026-116512

The Project Manager WordPress plugin (versions up to and including 4.1.1 ) is vulnerable to Remote Code Execution (RCE) . The root cause is the unsanitized id parameter being concatenated directly into a pipe-delimited validation rule string, which is then split and each token is executed as a dy...

CVE-2026-116512 Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...