1187725 matches found
EUVD-2026-107394
A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The explo...
CVE-2026-114262
The file-management-system (dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df) contains an unrestricted file upload vulnerability in the store function of app/Http/Controllers/FileController.php . This issue stems from the manipulation of the File argument, allowing for remote attacks. The exploit has bee...
CVE-2021-20038-SonicWall-RCE
SonicWallSSL-VPNRCE CVE-2021-20038 Command-line parameters -h View help -u Specify url -f Specify file Entries in the file must include the http/https prefix...
magnolia-rce
Exploit Title: Magnolia DX Core 6.3.8 - Command Injection Date: 05/16/2025 Exploit Author: tmrswrr Version: 6.3.8 Vendor home page: https://docs.magnolia-cms.com/home/ Product: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Authenticate as an admi...
Node.js < 22.23.4, < 24.22.1, < 26.12.1 - Out-of-Bounds Write in the Bundled Brotli Decoder leading to Remote Code Execution
Out-of-Bounds Write in the Bundled Brotli Decoder leading to Remote Code Execution vulnerability discovered by Matteo Collina in WordPress Npm Node.js versions 22.23.4...
redis-cve-2026-23479-check
redis-cve-2026-23479-check You do you. I do me. We share contexts. Your Redis stays yours; the checker reads one INFO line and changes nothing. A safe, read-only version checker for CVE-2026-23479 β the use-after-free in Redis's blocking-client code that lets an authenticated user reach remote co...
thinkphp5.0.1-automatic-getshell
thinkphp5.0.1-automatic-getshell thinkphp5.0.1 automatic getshell script Solves some minor issues encountered with thinkphp5.0.1, saving you the hassle of manual reproduction by building a dedicated script from scratch...
CVE-2024-6387-POC
Exploiting OpenSSH Vulnerability CVE-2024-6387 π A Python script designed to exploit a remote code execution RCE vulnerability in OpenSSH CVE-2024-6387. This vulnerability involves a condition in the handler that can lead to arbitrary code execution, allowing an attacker to gain root access. This...
CVE-2019-3396
CVE-2019-3396 Confluence Unauthorized RCE CVE-2019-3396 Vulnerability Pitfall: Some versions require adding Referer to succeed File Read POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:55.0 Gecko/20100101 Firefox/55.0 Accept:...
CiscoExploit
CiscoExploit Cisco Scan IP/Port/HostName/Boot/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP RCE...
CS4239-Spring4Shell-POC
CS4239-Spring4Shell-POC Proof of concept for CVE-2022-22965 Spring4Shell for CS4239 G410 report. Adapted from this PoC to demonstrate unpatched & patched behavior. Running the demo There are 2 example programs dockerized in this repository with identical source code. One uses a vulnerable version...
CVE-2020-29607-POC
Pluck CMS 4.7.13 File Upload RCE Exploit π¨ Educational Remote Code Execution Exploit π¨ Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 β οΈ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...
CVE-2022-21907
CVE-2022-21907 Description - POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. - create by antx at 2022-01-17. Detail - HTTP Protocol Stack Remote Code Execution Vulnerability. - Similar to https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. - This problem...
CVE-2026-114049
A flaw was found in vLLM. A remote attacker can compromise the integrity of responses generated for other users by submitting concurrent constrained generation requests. Due to improper state cleanup during batch reorganization, restriction rules defining permitted response tokens can persist in...
CVE-2026-87367
A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...
OpenEMR-RCE
OpenEMR RCE exploit / PoC OpenEMR --shell --user --password --debug exploit.rb semi-auto --root-url --user --password --payload --lhost --lport --debug exploit.rb auto --root-url --user --password --lhost --lport --debug exploit.rb -H | --help Options: -r , --root-url Root URL base path including...
CVE-2026-87292
A flaw was found in the OpenJDK networking component. This vulnerability may allow an unauthenticated remote attacker to cause unauthorized data modification. By supplying crafted input to exposed networking application programming interfaces APIs, such as through a web service, an attacker can...
CVE-2026-83376
A flaw was found in the Java Secure Socket Extension JSSE component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security TLS connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs...
CVE-2026-42167-PoC
CVE reported by ZeroPath Research original writeup: https://zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce my version : https://jimmexploit.vercel.app/cve/proftpd-unauthenticated-sql-injection-leads-to-rce Description This repository contains a functional exploit for...
fastjson-RCE
fastjson-v1.2.47-RCE Vulnerability Reproduction fastjson-1.2.47 == Resource Download: δΈθ½½ http://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.47/ ζζ‘£ https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 ζΊη https://github.com/alibaba/fastjson/archive/1.2.47.zip jar...