CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC Repositorio: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Descripción Este repositorio contiene un exploit en Python para CVE-2019-16278 , una vulnerabilidad en Nostromo 1.9.6 un servidor web. La vulnerabilidad permite la Ejecución Remota de Código...

weblogic_honeypot

WebLogic honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Written by: Omer Cohen @omercnet Special thanks: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev Contact: [email protected] WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic...

PoC_CVE-2016-2098_Rails42

Una PoC de CVE-2016-2098 rails 4.2.5.1 la vista tiene un código vulnerable app/views/poc/render1.html.erb el siguiente comando causará ejecución remota de código $ curl ':3000/poc/render1?template\inline='...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Análisis de Alerta SOC: Lectura Arbitraria de Archivos en Checkpoint Security Gateway CVE-2024-24919 Introducción CVE-2024-24919 es una vulnerabilidad crítica de día cero en Check Point Security Gateways que permite a atacantes remotos no autenticados leer archivos arbitrarios de los sistemas...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versiones 4.33.0 - Ejecución Remota de Código Descripción En versiones 4.33.0 de Statamic CMS donde el front-end tiene un formulario con carga de archivos activa, es posible enviar archivos PHP creados para parecer imágenes, independientemente de las reglas de...

CVE-2021-36260

Vulnerabilidad RCE CVE-2021-36260 en Hikvision Descripción de la vulnerabilidad Un atacante puede aprovechar esta vulnerabilidad para obtener un shell root sin restricciones y tomar el control total del dispositivo, incluso si el propietario del dispositivo está limitado a un shell protegido...

CVE-2022-2992

CVE-2022-2992 Ejecución remota de comandos autenticada en Gitlab mediante la importación de GitHub. Una vulnerabilidad en GitLab CE/EE que afecta a todas las versiones desde 11.10 anteriores a 15.1.6, todas las versiones desde 15.2 anteriores a 15.2.4, todas las versiones desde 15.3 anteriores a...

RLSA-2026:62170 Important: gegl04 security update

GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

gegl04 security update

An update is available for gegl04. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GEGL Generic Graphics Library is a graph-based image processing framework...

CVE-2021-29440

CVE-2021-29440 Procesamiento Twig inseguro de páginas estáticas que conduce a RCE en Grav CMS 1.7.10 Grav es una plataforma web basada en archivos. El procesamiento Twig de páginas estáticas puede habilitarse en el front matter por cualquier usuario administrativo con permisos para crear o editar...

CVE-2026-19116 WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form

The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...

CVE-2026-19116

The User Frontend WordPress plugin before 4.3.11 allows PHP Object Injection via its frontend post editing form. When a submitted post is reopened, user-supplied field values are deserialized without proper sanitization, enabling any authenticated user with subscriber-level access or above to inj...

EUVD-2026-69865

The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Lab Setup ⚠️ Disclaimer This lab is for educational and research purposes only. Do NOT use any of the information or techniques demonstrated here on systems you do not own or have explicit permission to test. Unauthorized use of these methods may violate laws and result in severe...

CVE-2022-24112

CVE-2022-24112 Apache APISIX apisix/batch-requests RCE...

EUVD-2026-69872

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms WordPress plugin (versions ≤ 1.4.11) is affected by an unauthenticated arbitrary file deletion vulnerability rooted in insufficient file path validation in the delete_submission_files function. An attacker submits a malicious path traversal URL via the plug...

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence RCE pre-autenticación...

EUVD-2026-69873

The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce validation in the DPDEVinstallthemesfunc function registered on the wpajaxDPDEVinstallthemes action. This makes it possib...

CVE-2026-14357

The DevKit Pro plugin for WordPress is vulnerable to missing authorization in versions up to and including 2.3.0 . The root cause is a missing capability check and nonce validation in the DPDEV_install_themes_func() function registered on the wp_ajax_DPDEV_install_themes action. This allows authe...