CVE-2026-97359

HFS2 version 2.4.0 and earlier are vulnerable to a template injection flaw within the multipart upload handler . Unauthenticated attackers can achieve remote code execution (RCE) on the underlying host system by crafting a filename containing a closing template quoting sequence followed by an exe...

EUVD-2026-85879

HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by embedding malicious template syntax in a filename. Attackers can craft a filename containing a closing template...

CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy

Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...

CVE-2026-91187

The dashbit nimble_zta library (versions 0.1.2 before 0.1.3 ) contains an improper verification of cryptographic signature vulnerability. Specifically, the verify_token/2 function in lib/nimble_zta/cloudflare.ex calls JOSE.JWT.verify/2 but fails to check the boolean verification result, returning...

EUVD-2026-85871

Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...

Malicious code in simple-date-formatter-new-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e57e9eff2fae987a2a23e3107d64c818e020b03380e31d6a3ae9cf8d4eb14ec package.json declares a postinstall lifecycle script that pipes a string-reversed shell one-liner through rev | bash, decoding to a bash reverse shel...

CVE-2026-97182

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper...

CVE-2026-96515

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

CVE-2025-3248

CVE-2025-3248 — Exploit RCE para Langflow Exploit de ejecución remota de código RCE para aplicaciones Langflow vulnerables a CVE-2025-3248. Endpoint afectado: /api/v1/validate/code 🚀 Características del Exploit 🔓 RCE remoto y sin autenticación 🔐 No se requiere autenticación 🐍 Script de una línea ...

CVE-2021-44228

CVE-2021-44228 El 9 de diciembre de 2021 el mundo conoció una nueva falla de seguridad relacionada con Log4J. La puntuación CVSSv3 Common Vulnerability Scoring System de la vulnerabilidad fue evaluada en 10, lo que la convierte en nivel crítico https://nvd.nist.gov/vuln/detail/CVE-2021-44228...

CVE-2024-8232

CVE-2024-8232 – Vulnerabilidad de subida de archivos en SpiderControl SCADA Web Server Resumen El servidor web SpiderControl SCADA es vulnerable a la subida arbitraria de archivos sin autenticación, lo que permite a los atacantes subir scripts maliciosos por ejemplo, webshells y obtener ejecución...

CVE-2023-41892

CVE-2023-41892 - Craft CMS Ejecución Remota de Código RCE referencias: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2023-36845

CVE-2023-36845 Usage? bash cve.sh yourfile.txt Referensi: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Ejecución remota de código en Apache Log4j） todas las versiones de log4j-core =2.0-beta9 y =2.14.1 Las versiones 1.x tienen otras vulnerabilidades; recomendamos que actualice a la última versión. Avisos / boletines de seguridad relacionados con Log4Shell CVE-2021-44228 Uso: descargu...

CVE-2025-55182

CVE-2025-55182 Código de demostración de la vulnerabilidad de ejecución remota de código RCE en React Server Functions Next.js, etc.. Aprovecha la contaminación de prototipos prototype pollution para ejecutar código arbitrario en el servidor sin autenticación. Nota : Este repositorio es únicament...

tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

CVE-2021-3007-docker-poc

CVE-2021-3007 — RCE por deserialización HTTP en Laminas/Zend Este repositorio contiene una prueba de concepto totalmente reproducible y una plantilla de exploit de Nuclei para CVE-2021-3007, una vulnerabilidad crítica de deserialización de PHP en Zend\Http\Response\Stream laminas-http plantilla d...

CVE-2023-0669-Analysis

CVE-2023-0669 Este repositorio contiene los paquetes y scripts utilizados en este análisis: https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-goanywhere La versión vulnerable de GoAnywhere para Linux https://www.dropbox.com/s/j31l8lgvapbopy3/ga703linuxx64.sh?dl=0...

CVE-2022-41544

CVE-2022-41544 Script de exploit para CVE-2022-41544 - RCE en get-simple CMS Uso Usage: python3 CVE-2022-41544.py Ejemplo...

React2Shell-CVE-2025-55182-Advanced-Scanner

CVE-2025-55182 Escáner Avanzado Herramienta avanzada de pruebas de penetración para detectar y explotar la vulnerabilidad CVE-2025-55182 en aplicaciones Next.js 📋 Tabla de Contenidos Visión General Características Instalación Uso Ejemplos Técnicas de Bypass Detalles Técnicos Aviso Legal...