EUVD-2026-85185

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CVE-2026-96455

The Reachy Mini daemon is vulnerable to unauthenticated remote code execution due to a missing authentication check on its app installation endpoint (POST /apps/install ). An attacker on the same local network can exploit this by providing a body that names a public Hugging Face Space. The daemon...

SenselessViolence

...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss-selector-parser (CVE-2026-9358)

Summary A Regular Expression Denial of Service ReDoS vulnerability in the postcss-selector-parser library CVE-2026-9358 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 7.1.4. Vulnerability Details CVEID:CVE-2026-9358 DESCRIPTION: A vulnerabilit...

CVE-2020-0796

CVE-2020-0796 概述： SMBv3从Windows 10/Server版本1903开始添加的压缩功能存在整数溢出漏洞，微软于2020年3月12日确认。攻击者可以利用该漏洞实现本地权限提升（LPE）和远程代码执行（RCE）。此处仅讨论LPE漏洞。 受影响版本 ： Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server, version...

cve-2022-26809

CVE-2022-26809 Detects attempts and successful exploitation of CVE-2022-26809, a remote code execution vulnerability over DCE/RPC. This package is described in detail in this Corelight blogpost. This package generates the following notices: CVE202226809::ExploitAttempt, and...

CVE-2018-16119

CVE-2018-16119: Authenticated Remote Code Execution in TP-Link WR1043ND Overview CVE-2018-16119 is a critical authenticated remote code execution vulnerability affecting TP-Link TL-WR1043ND routers. This vulnerability allows authenticated attackers to execute arbitrary commands on the target devi...

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

CVE-2021-32708

CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...

CVE-2019-0230-PoC

CVE-2019-0230 CVE-2019-0230 Exploit This is CVE-2019-0230 Exploit : usage python3 cve-2019-230.py example: root@kitploit: python3 cve-2019-0230-poc.py pentest.com whoami Testing pentest.com! Command being passed for RCE: whoami 2020/10/22/...

CVE-2022-44877-CWP7

CVE-2022-44877-CWP7 Control Web Panel 7 CWP7 Remote Code Execution RCE CVE-2022-44877 Unauthenticated Repository will get updated with POC soon...

node-cve-2018-4407

node-cve-2018-4407 Node.js PoC exploit code for CVE-2018-4407 Author: Sam Decrock This script is based on the scapy script provided by Zuk: iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC in a tweet: pip install scapy sudo scapy sendIPdst=“Target...

CVE-2020-15227

CVE-2020-15227 ¡DESCARGO DE RESPONSABILIDAD! No asumo ninguna responsabilidad por su uso en un entorno real, así que por favor NO lo hagas. Esta cosita es solo para demostrar y probar cosas para los administradores de sistemas. Hice este exploit según la publicación de un CVE de David Grudl el...

CVE-2022-24086

CVE-2022-24086 Tested with: magento 2.4.3 and sample data Docker image: docker.io/bitnami/magento:2.4.3-debian-10-r0 First Name: root@kitploit: var this.getTemplateFilter.filter$order.shippingaddress.cityvar...

njRAT-0.7d-Stub-CSharp

This repository does not have a README...

cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC consider this to chain CVE-2019-5418! Pairs lovely with CVE-2019-5418! POC Screenshot 🚨 Warning This repository contains a proof-of-concept PoC exploit demonstrating remote code execution RCE in Ruby on Rails applications via...

CVE-2026-96443

A vulnerability exists in Apache Doris due to insufficient validation of the JDBC driver URL . This flaw allows a privileged user to achieve remote code execution (RCE) on the FE (Front-End) . While the CVSS score indicates a medium severity, the technical impact is described as partial. No speci...

EUVD-2026-85178

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE...

CVE-2026-96443 Apache Doris: JDBC driver URL validation bypass leads to remote code execution

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE...

Exploit-CVE-2023-38646-Metabase

Exploit CVE-2023-38646 Metabase before 0.46.6.1 open source and before 1.46.6.1 Enterprise Exploit for the Remote Code Execution RCE vulnerability identified in Metabase versions before 0.46.6.1 open source and 1.46.6.1 Enterprise. The vulnerability allows attackers to execute arbitrary commands ...