CVE-2026-21096

CVE-2026-21096 is a heap-based buffer overflow in the JPEG decoder of libimagecodec.quram.so in Samsung Mobile devices, prior to the SMR Sep-2026 Release 1 . The vulnerability allows remote attackers to execute arbitrary code, with no user interaction or privileges required, though the attack req...

CVE-2026-21096

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

EUVD-2026-74637

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

EUVD-2026-74636

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...

CVE-2026-21095

CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

CVE-2025-3248-Langflow-RCE

mitsec - CVE-2025-3248 Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features Remote and unauthenticated RCE No authentication required Python3 one-liner script Colorized terminal...

CVE-2014-8731-PoC

CVE-2014-8731-PoC - PHPMemcachedAdmin Remote Code Execution I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2014-8731-PoC...

CVE-2022-41544

CVE-2022-41544 Exploit script for CVE-2022-41544 - RCE in get-simple CMS Usage Usage: python3 CVE-2022-41544.py Example...

CVE-2026-24061_POC

CVE-2026-24061 GNU Telnetd（RCE） スクリプトパラメータ...

Exploit-CVE-2024-23897

Exploit-CVE-2024-23897 Ejecutar el Contenedor docker run -p 8080:8080 --name vulnerable-jenkins -d jenkins/jenkins:2.441-jdk17 Verificar logs docker logs Obtener la IP de la máquina Docker: docker inspect vulnerable-jenkins | grep IPAddress Código de Explotación: python3 exploit.py --target...

CVE-2025-3248

CVE-2025-3248 — Langflow RCE Exploit CVE-2025-3248 の脆弱性がある Langflow アプリケーション向けのリモートコード実行 RCE エクスプロイト。 影響を受けるエンドポイント: /api/v1/validate/code 🚀 エクスプロイトの機能 🔓 リモートかつ認証不要の RCE 🔐 認証は不要 🐍 Python3 ワンライナースクリプト 🎨 色付きターミナル出力でわかりやすく表示 🔧 使用方法 root@kitploit: python3 langflowrce.py -u http://target:7860 -c "id"...

CVE-2023-41892

CVE-2023-41892 - Craft CMS リモートコード実行 RCE 参照： https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 編集: Oracle は新しい脆弱性 CVE-2025-61884 を開示しました。この脆弱性の検出スクリプトは、このリポジトリまたは元の場所https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550 にあります。 以下は Oracle のセキュリティアドバイザリ からの引用です： このセキュリティ・アラートは、Oracle E-Business Suite の脆弱性 CVE-2025-61882...

CVE-2023-36845

CVE-2023-36845 Usage? bash cve.sh yourfile.txt Referensi: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...

CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA Web Server ファイルアップロードの脆弱性 概要 SpiderControl SCADA Web Server は、認証なしの任意ファイルアップロードに対して脆弱であり、攻撃者が悪意のあるスクリプト（例：Webシェル）をアップロードしてリモートコード実行を獲得できる可能性があります。 CVE ID : CVE-2024-8232 ベンダー : iniNet Solutions GmbH 影響を受ける製品 : SpiderControl SCADA Web Server 影響 : リモートコード実行...

CVE-2018-11235

CVE-2018-11235 Para empezar Para construir los contenedores Docker, use: root@kitploit: make docker Los siguientes comandos make deben ejecutarse en paralelo en diferentes terminales desde su máquina Para iniciar el contenedor del servidor atacante, use: root@kitploit: make runserver para iniciar...