CVE-2025-49113

CVE-2025-49113 Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization...

CVE-2026-116852

The WordPress Widget Options plugin (versions ≤ 4.2.5 ) is vulnerable to Remote Code Execution (RCE) . The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the provided documents confirm the existence of the RCE and its CRITICAL severity, specific technical ...

CVE-2026-116852 WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability

Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...

EUVD-2026-114309

Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 is a security vulnerability found in Cacti, a network monitoring and management software. This vulnerability allows an attacker to remotely exploit the system without authentication by sending a specially crafted HTTP request. By taking advantage of this vulnerabilit...

CVE-2024-4577-PHP-RCE

CVE 2024-4577 PHP Remote Code Execution automated scanner by Waived Affected versions: PHP 8.3, 8.3.8, 8.2. 8.2.20, 8.1., 8.1.29 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 https://www.exploit-db.com/exploits/52047 https://vulners.com/cve/CVE-2024-4577 Overview: This is a scanner that...

CVE-2020-10199-Nexus-3.21.01

CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Remote Code Execution Authenticated - Updated This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit https://www.exploit-db.com/exploits/49385 Change the user,password,URL and CMD...

Exploit for CVE-2026-6516

cve-2026-6516-scanner.py...

CLEANSTART-2024-SZ97187 GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability...

CLEANSTART-2024-IP30957 GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2024-GC14102 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2024-HD72386 GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: go build cve-2026-19900-PoC.go ./cve-2026-19900-PoC -t...

CVE-2026-76012

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...

CLEANSTART-2025-SK82750 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36796 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-JG63575 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36794 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-MK28879 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36793 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-FK11078 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36792 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CVE-2026-115346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convertpaletteimagestotruecolor function. This is due to insufficient file type validation before processing uploaded files. This mak...

CVE-2026-104739

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it possible for authenticated attackers, wi...