CVE-2026-76485

A vulnerability exists in the VXLAN Operation, Administration, and Maintenance (OAM) feature, known as NGOAM , in Cisco NX-OS Software running on Nexus 3000 and 9000 Series Switches . The root cause is improper input validation of IP traffic when the NGOAM feature is enabled. An unauthenticated, ...

CVE-2026-76485 Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

A vulnerability in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service DoS on an affected device. This vulnerability is...

rails-exploit-cve-2013-0156

== Preuves de concept PoC Rails pour CVE-2013-0156 et CVE-2013-0155 Application Rails 3.2.10 amorcée avec l'exploit d'exécution de code à distance. Réf. : https://github.com/ronin-ruby/ronin-ruby.github.com/blob/rails-pocs/blog/posts/2013-01-09-rails-pocs.md === Configuration Installer les...

CVE-2026-76471 Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of data that is...

CVE-2026-76471

A vulnerability in the NX-API feature of Cisco NX-OS Software allows an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) . The root cause is insufficient input validation of data sent to the NX-API. An attacker can exploit this by ...

CVE-2026-76465 Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of...

CVE-2026-76465

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial o...

CVE-2020-5902-POC-EXP

CVE-2020-5902-POC-EXP Использование python3 f5rce.py scan iplisttxt python3 f5rce.py https://test.cn:443 ifconfig Режим сканирования Режим RCE...

CVE-2026-76437

A vulnerability in the web-based user interface of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) allows an authenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges . The root cause is the improper validation of us...

CVE-2026-76437 Cisco Smart Software Manager On-Prem Command Injection Vulnerability

A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...

CVE-2026-76452 Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient...

EUVD-2026-94450

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient...

CVE-2024-7120-Exploit-by-Dark-07x

Инъекция команд в устройствах Raisecom CVE-2024-7120 Доказательство концепции! Обзор Уязвимость инъекции команд была обнаружена в шлюзовых устройствах RAISECOM, затрагивающая модели MSG1200, MSG2100E, MSG2200 и MSG2300. Эта уязвимость позволяет удаленным злоумышленникам выполнять произвольные...

EUVD-2026-94448

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...

CVE-2026-20328 Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...

magento2-cosmic-sting-patch

Патч Magento 2 для CVE-2024-34102 также известной как Cosmic Sting Альтернативное решение в виде расширения Magento 2 для устранения XXE-уязвимости CVE-2024-34102 также известной как Cosmic Sting. Если вы не можете обновить Magento или применить официальный патч, попробуйте это. Если вы не...

CVE-2026-20328 Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...

CVE-2023-22524

Preuve de concept de vulnérabilité RCE dans Atlassian Companion CVE-2023-22524 Aperçu Ce dépôt contient une preuve de concept PoC pour la vulnérabilité d'exécution de code à distance récemment découverte dans Atlassian Companion pour macOS, identifiée sous le nom CVE-2023-22524. Ce problème...

CVE-2026-20321

A vulnerability exists in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) . Due to insufficient input validation of user-controlled command arguments, an authenticated remote attacker with valid administrative credentials can send crafted input to the AP...

EUVD-2026-94524

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...