CLEANSTART-2023-PQ45543 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-WS00387 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-LN29601 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-PU29121 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-AM62889 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

CLEANSTART-2023-BN75372 Exim libspf2 Integer Underflow Remote Code Execution Vulnerability

Security vulnerability affects the libspf2 package. Exim libspf2 Integer Underflow Remote Code Execution Vulnerability...

CVE-2022-24715

Icinga Web 2 - Authenticated Remote Code Execution 2.8.6, 2.9.6, 2.10 Remote command execution Reverse shell Usage usage: exploit.py -h -u URL -U USER -P PASSWORD -i IP -p PORT Welcome. options: -h, --help show this help message and exit -u URL, --url URL Insert URL http://ipvictima -U USER, --us...

cve-2020-0688

cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...

CLEANSTART-2023-VL53503 potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3

Security vulnerability affects the spamassassin package. A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CVE-2026-25053

CVE-2026-25053 Read: https://yadhu.in/2026/02/09/Breaking-Down-the-n8n-Git-Node-Vulnerability-CVE-2026-25053-Remote-Code-Execution/...

magento2-cosmic-sting-patch

Magento 2 Patch for CVE-2024-34102aka Cosmic Sting An alternative solutionas a Magento 2 extension to fix the XXE vulnerability CVE-2024-34102aka Cosmic Sting. If you cannot upgrade Magento or cannot apply the official patch, try this one. If you don't fix this vulnerability, the attacker can RCE...

[SECURITY] [DLA 4873-1] dovecot security update

Debian LTS Advisory DLA-4873-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 31, 2026 https://wiki.debian.org/LTS Package : dovecot Version : 1:2.3.19.1+dfsg1-2.1+deb12u7 CVE ID : CVE-2026-27852 CVE-2026-33263 CVE-2026-33604 CVE-2026-33605 CVE-2026-33606...

CVE-2026-78191

The WebDyne software (versions 2.031 to before 3.022) is vulnerable to remote code execution because it incorrectly identifies files containing .psp anywhere in the name as Perl pages. This issue stems from the WEBDYNE_PSP_EXT_RE regular expression lacking an end anchor. An attacker can exploit t...

CVE-2026-78191 WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a page by matching its name against WEBDYNEPSPEXTRE, which has no end anchor. An application that accepts uploads by checking only the...

CVE-2026-78191 WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a page by matching its name against WEBDYNEPSPEXTRE, which has no end anchor. An application that accepts uploads by checking only the...

EUVD-2026-114717

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a page by matching its name against WEBDYNEPSPEXTRE, which has no end anchor. An application that accepts uploads by checking only the...

motionEye-RCE-through-config-parameter

MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that client-side validation within the web UI can be bypassed. This allows arbitrary input to be submitted, including payloads that can trigger execution on t...

CVE-2026-78189 WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback

WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback. When a request matches no file, the PSGI handler retries it as an API route through apifilename. That keeps .. segments in the request path and only...