CVE-2025-24893

CVE-2025-24893 XWiki Remote Code Execution RCE Exploit A Python3 exploit for CVE-2025-24893 , a critical Unauthenticated Remote Code Execution RCE vulnerability affecting the XWiki platform. This script exploits a Code/Expression Injection flaw CWE-95 within the SolrSearch macro component. The fl...

CVE-2026-20841-PoC

CVE-2026-20841 - Vulnerabilidad de Ejecución Remota de Código en la Aplicación Bloc de Notas de Windows Resumen de la Vulnerabilidad...

CVE-2026-6009

⚠️ Disclaimer: This repository is for educational purposes and authorized security testing only. Do not use against systems you do not own or have explicit written permission to test. CVE-2026-6009 Proof of Concept Summary The Jaspersoft report library version = 7.0.3 is vulnerable to a remote cod...

EUVD-2026-62549

Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 原始链接：https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye 通过客户端验证绕过实现 RCE 摘要 在对运行在 Docker 中的 MotionEye 实例进行安全测试时，发现 Web UI 中的客户端验证可以被绕过。这允许提交任意输入，包括可能触发宿主容器执行命令的载荷。该问题如果被利用，存在远程代码执行（RCE）的风险。 受影响版本 ：包括...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Carga Arbitraria de Archivos sin Autenticación Investigación por: Atomic Edge Severidad: Crítica | CVSS: 9.8 | Autenticación Requerida: Ninguna ⚠️ v2 — Correcciones técnicas aplicadas según los comentarios de la comunidad. Consulte el Registro de cambios...

cve-2025-53770-research

cve-2025-53770-research 🚨 关于 SharePoint “ToolShell” RCE 零日漏洞 CVE-2025-53770 的威胁情报与事件响应研究。🕵️‍♂️ 涵盖根因反序列化缺陷、攻击时间线、风险指标以及防御性 EDR 验证演练手册。🛡️ 🕵️ CVE-2025-53770 — SharePoint “ToolShell” 零日漏洞研究 关于 Microsoft SharePoint “ToolShell” RCE 零日漏洞的威胁情报与事件响应研究。 涵盖根因反序列化缺陷、攻击时间线、风险指标以及防御性/EDR 验证演练手册。 作者：Muhammad...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE lab End-to-end working RCE exploit + reproducible lab for CVE-2019-13132 , a stack buffer overflow in libzmq's CURVE INITIATE handshake handler. An attacker who knows the server's long-term public key a public parameter by design can...

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · OS Command Injection → RCE Researcher: K Disclosure Type: Responsible Disclosure Status: Patched Affected Product: Chamilo LMS 2.0 Confirmed on v1.11.32 📋 Vulnerability Summary...

EUVD-2026-68800

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload RCE...

GHSA-GXMJ-R5RF-GGWQ elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

CVE-2026-76595

A flaw was found in advisor-backend. Multiple code paths within the application deserialize YAML YAML Ain't Markup Language with an unsafe full Loader, which can instantiate arbitrary Python objects via YAML tags. An unauthenticated remote attacker can exploit this by submitting specially crafted...

CVE-2026-0770

CVE-2026-0770: Langflow execglobals Ejecución Remota de Código No Autenticada PoC CVE-2026-0770 es una vulnerabilidad de Ejecución Remota de Código RCE no autenticada que afecta a Langflow. El fallo se origina por una validación de entrada incorrecta en el manejo del parámetro execglobals...

kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - 認証済みリモートコード実行 このリポジトリには、LimeSurvey の認証済みリモートコード実行脆弱性 CVE-2021-44967 の実用的なエクスプロイトが含まれています。 🎯 互換性 テスト済みで動作確認済み: LimeSurvey 5.2.x LimeSurvey 6.x 🐛 脆弱性の概要 この脆弱性により、管理者権限を持つ認証済みユーザーが悪意のあるプラグインをアップロードできます。LimeSurvey...

CVE-2026-77009 WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

CVE-2026-77009

CVE-2026-77009 affects the WatchMan-Site7 WordPress plugin through version 4.2.0 . The plugin fails to restrict access to its debugging console , which executes user-supplied PHP code . Any authenticated user with a low privilege level (e.g., a subscriber ) can leverage this to achieve remote cod...

CVE-2026-77009 WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

CVE-2026-10821 Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE

The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...