1187364 matches found
dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
CVE_2020_0796_CNA
CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker...
CVE-2017-0199
Exploit toolkit CVE-2017-0199 - v2.0 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration...
dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
CVE-2018-2628
Test for Vulnerabilities Upload Shell Method one: Method two: Execute Shell Obtain Meterpreter msf use exploit/multi/script/webdelivery msf exploitmulti/script/webdelivery set target 3 target = 3 msf exploitmulti/script/webdelivery set payload windows/meterpreter/reversetcp payload =...
ros2_CVE-2024-28231
This repo includes a vulnerable Docker image of ros2 iron based on ubuntu 22 and a matching exploit. We exploit the vulnerability in fastrtps version 2.10.3, enabling denial of service of a remote subscriber via heap buffer overflow. Vulnerable base image Fast RTPS version 2.10.3 and dependencies...
relatorio-n8n.md
TryHackMe Report — n8n: CVE-2025-68613 Vulnerability: CVE-2025-68613 Publication: 19/12/2025 CVSS: 9.9 Critical Summary Report on the exploitation and analysis of the expression injection vulnerability in n8n that allows remote code execution RCE. Documents the environment, steps, tested payloads...
CVE-2022-1609
CVE-2022-1609 CVE-2022-1609 WordPress Weblizar后门 curl -s -d 'blowfish=1' -d "blowf=system'id';" 'http://localhost:8888/wp-json/am-member/license' uid=33www-data gid=33www-data groups=33www-data...
f5_rce_poc
Usage python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates: Fixed some command execution...
dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
CVE-2025-53770
CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...
CVE-2024-47076
CUPS Common UNIX Printing System, the printing system of Linux and Unix systems, is a service related to print management and distributing tasks among devices. A security vulnerability named CVE-2024-47076 has been disclosed on this service. You can use the relevant scripts to learn whether your...
CVE-2026-37637
CVE-2026-37637 Proof of Concept for CVE-2026-37637 - Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload in filemanager.php. Overview CVE-2026-37637 is a Remote Code Execution vulnerability affecting Alexantr filemanager v1.0. The vulnerability exists in the...
CVE-2026-113705
The a2aproject a2a-rs software (versions up to 0.4.3 ) contains a vulnerability in the processing of the a2a-server/src/error.rs file. A remote attacker can execute a manipulation that results in information exposure via error messages. To remediate this issue, the patch 713b943af94ab2d521d483b84...
CVE-2026-113311
A flaw was found in the chromium-browser ServiceWorker component. A remote attacker could exploit this flaw to execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page. This issue stems from a use-after-free memory corruption condition, which...
CVE-2026-113298
A flaw was found in the Transactions Platform component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. By persuading a user to visit a specially crafted HTML page, an attacker can trigger a use-after-free error, which occurs when...