CVE-2026-95660

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command injection. The attack may be launched...

CVE-2026-95657

A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site...

CVE-2026-95656

A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function addwatchuisnapshot of the file changedetectionio/blueprint/addwatchui/init.py of the component Preview Endpoint. Performing a manipulation of the argument url results in server-side...

CVE-2026-43643

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

CVE-2026-43642

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

CVE-2026-43641

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by bypassing authentication through specific parameter combinations. Attackers can...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Implementación en Python de la ejecución remota de código no autenticada en Apache ActiveMQ Configuración y Explotación nc -lvnp 4444 - Iniciar listener python3 -m http.server 8080 - Servir poc.xml que contiene tu payload python3 CVE-2023-46604-RCE.py -i -p -u...

Vuln_Remediation_MegaQuagga

VulnRemediationMegaQuagga Informe de remediación para MegaQuagga Publishing que valida la mitigación de CVE-2019-9978 mediante una defensa progresiva por capas. Documenta la inserción de un proxy inverso, la implementación de ModSecurity como WAF, la integración con Graylog SIEM y la aplicación d...

ASUS-AiCloud-RCE

Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...

CVE-2015-1578-PoC

CVE-2015-1578-PoC Resumen Este es un exploit de prueba de concepto para CVE-2015-1578 , una vulnerabilidad de desbordamiento de búfer en Achat 0.150 beta7 en Windows. La explotación permite la ejecución remota de código mediante un paquete UDP manipulado. Propósito Este PoC pretende servir como u...

CVE-2024-32030-Nuclei-Template

Plantilla Nuclei para CVE-2024-32030 Descripción Este repositorio contiene una plantilla de Nuclei para detectar la vulnerabilidad CVE-2024-32030. Esta vulnerabilidad permite la ejecución remota de código a través de la resolución JNDI de la recopilación de métricas JMX. Detalles de la...

PicusSecurity4.Week.Repo

githubRepo para la vulnerabilidad follina CVE-2022-30190 : CVE 0-day MS Offic RCE, también conocido como msdt follina...

CVE-2019-16759

CVE-2019-16759 Vbulletin RCE Exploits...

CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration. Release note:...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 PoC de ejecución remota de código en Cisco Catalyst Este repositorio contiene el código de prueba de concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

PoC-CVE-2017-0199

PoC-CVE-2017-0199 Kit de explotación para la vulnerabilidad RCE de Microsoft RTF. Acerca de esta vulnerabilidad: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...

CVE-2024-47076

CUPS Common UNIX Printing System, the printing system of Linux and Unix systems, is a service related to print management and distributing tasks among devices. A security vulnerability named CVE-2024-47076 has been disclosed on this service. You can use the relevant scripts to learn whether your...

CVE-2026-77257

The MCP Atlassian Model Context Protocol server for Confluence and Jira is vulnerable to arbitrary file path traversal in its HTTP-exposed upload tools prior to version 0.22.0 . The root cause is that the server passes a caller-provided file_path to local file operations without restricting acces...

CVE-2026-77257 MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided filepath to local file operations without restricting it to the workspace. A remote MCP caller with tool access ca...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 es una vulnerabilidad de carga de archivos arbitraria no autenticada con CVSS 8.1 High en Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Carga de archivos arbitraria no autenticada mediante bypass desanitizefilename CVSS 8....