EUVD-2026-73991

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha 监控通过 Cron API 授权绕过实现跨租户 RCE 一个用于复现和检测 CVE-2026-46716 的实验室环境。该漏洞是 Nezha 监控中的一个严重漏洞：POST /api/v1/cron 端点缺少管理员权限检查，使 RoleMember 用户能够实现跨租户远程代码执行。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-46716 GHSA| GHSA-99gv-2m7h-3hh9 CVSS| 9.9（严重）— AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 受影响版本|...

CVE-2026-28618

CVE-2026-28618 is a heap buffer overflow (OOB write) in the dec_frm_prepare function of oapv.c , part of the Android Media Framework . It can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability is rated CVSS 8.8 (High) and classified as ...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73967

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73960

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

CVE-2026-28609 is an out-of-bounds write vulnerability in MatroskaExtractor.cpp , caused by improper casting during a read operation. It can lead to remote code execution with low privileges required and no user interaction needed, rated CVSS 8.8 (HIGH) . The vulnerability is tracked in the Andro...

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73957

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28604

CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...

CVE-2026-28604

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-40217-PoC

CVE-2026-40217 — LiteLLM ガードレールサンドボックスエスケープ LiteLLM の POST /guardrails/testcustomcode — デフォルトのDockerデプロイメントにおいて、root としてのリモートコード実行 RCE に至るサンドボックスエスケープ。 フィールド| 値 ---|--- CVE| CVE-2026-40217 CVSS| 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-913 動的に管理されるコードリソースの不適切な制御 / CWE-94...

GHSA-XP7J-H7JC-4W8P Semaphore U: OS Command Injection

Summary An OS command injection in repository giturl handling lets any user holding the Manager or Owner role on any project the normal project-collaborator roles achieve remote code execution on the Semaphore server host. Using git's --upload-pack= option, an attacker runs arbitrary commands. Th...

EUVD-2026-66708

Gitea: Remote Code Execution via diffpatch Git Hook Installation...

GHSA-RCR6-4JQH-J84M Gitea: Remote Code Execution via diffpatch Git Hook Installation

Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...

CVE-2014-6271

CVE-2014-6271 "ShellShock"是GNU Bash 4.3及之前版本中存在的一个漏洞，原因是在函数定义之后，Bash处理环境变量值中尾部字符串的方式存在问题。该漏洞使得远程攻击者能够在特定情况下通过构造环境变量来执行任意代码，包括当环境变量跨越Bash执行的权限边界设置时。该漏洞已在多种场景中得到验证，例如OpenSSH sshd的ForceCommand特性、Apache...

cve-2020-5902

F5 BIG-IP "TMUI" RCE 漏洞的 NMAP 脚本 参考来源：https://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse...

CVE-2017-1000486

CVE-2017-1000486 PrimeFaces 5.x ELインジェクション（CVE-2017-1000486）の概念実証エクスプロイトです。このRCE脆弱性を利用して、ターゲット上でリモートコード実行が可能です。 脆弱性の説明 脆弱性の詳細な説明は、Minded Securityブログをご覧ください。 使用方法 このエクスプロイトには、重要なパラメータを表示するヘルプ機能があります。 root@kitploit: ./primefaces.py --help PrimeFaces 5.x EL injection exploit CVE-2017-1000486 by MOGW...

CVE-2019-5420-RCE

此存储库没有 README。...

CVE-2026-83997

CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...