EUVD-2026-88642

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The...

CVE-2026-102292 coolbeans1212 MateisHomePage-Website users.php cross site scripting

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The...

CVE-2026-102292

A cross-site scripting (XSS) vulnerability exists in the coolbeans1212 MateisHomePage-Website application. The flaw is located in an unknown functionality within the users.php file, where a remote attacker can manipulate the Search argument to execute the attack. While the product uses continuous...

CVE-2026-102292 coolbeans1212 MateisHomePage-Website users.php cross site scripting

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The...

CVE-2025-15467

CVE-2025-15467 Desbordamiento de búfer de pila en el análisis de CMS AuthEnvelopedData de OpenSSL. Vulnerabilidad Existe un desbordamiento de búfer de pila en evpciphergetasn1aeadparams al analizar parámetros de cifrado AEAD por ejemplo, AES-GCM en contenido CMS AuthEnvelopedData. Un IV de tamaño...

MassExploit-CVE-2024-4577

CVE-2024-4577 Escáner Masivo y Herramienta de Explotación Este script de Python automatiza la detección de servidores vulnerables a CVE-2024-4577 , una vulnerabilidad crítica en PHP-CGI que permite ejecución remota de código RCE a través de parámetros de consulta especialmente manipulados. La...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - Remote Command Execution CVE-2014-6287 🚨 About the Exploit This is a proof-of-concept exploit for the well-known Remote Command Execution vulnerability in Rejetto HttpFileServer HFS v2.3.x , identified as CVE-2014-6287. By abusing the vulnerable search functionality...

WHS3_vulhub

CVE-2017-8386: Evasión de la sandbox de git-shell para PoC de RCE 정수진@suz1n Resumen Git-shell proporciona un entorno que solo permite comandos git restringidos a través de SSH. Sin embargo, en versiones específicas de git-shell como la 2.12.2 existe una vulnerabilidad CVE-2017-8386 que permite...

Cerberus-React2Shell-Scanner-Exploit

Cerberus React2Shell - Framework de Explotación Armado ██████╗ ███████╗██████╗ ██████╗ ███████╗██████╗ ██╗ ██╗ ██╔════╝ ██╔════╝██╔══██╗██╔══██╗██╔════╝██╔══██╗██║ ██║ ██║ █████╗ ██████╔╝██████╔╝█████╗ ██████╔╝██║ ██║ ██║ ██╔══╝ ██╔══██╗██╔══██╗██╔══╝ ██╔══██╗██║ ██║ ╚██████╗ ███████╗██║...

F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study

Este repositorio no tiene un README...

cve-2017-12629

README Ejecución remota de código ocurre en Apache Solr anterior a 7.1 con Apache Lucene anterior a 7.1 explotando XXE en conjunto con el uso de un comando add-listener de la Config API para alcanzar la clase RunExecutableListener. Elasticsearch, aunque utiliza Lucene, NO es vulnerable a esto...

CVE-2025-55182-Scanner

CVE-2025-55182 - Escáner de RCE para React Server Components Un completo kit de herramientas de pruebas de seguridad para CVE-2025-55182, una vulnerabilidad crítica de ejecución remota de código sin autenticación previa en React Server Components. 🎓 NUEVO: ¡Guía Educativa Completa Disponible!...

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

text4shell-exploit

text4shell-exploit Un exploit personalizado basado en Python, un proof-of-concept PoC dirigido a Text4Shell CVE-2022-42889, una vulnerabilidad crítica de ejecución remota de código en Apache Commons Text versiones E...

CVE-2022-29464

CVE-2022-29464 Exploit e informe de WSO2 RCE CVE-2022-29464. Detalles CVE-2022-29464 es una vulnerabilidad crítica en WSO2 descubierta por Orange Tsai. La vulnerabilidad es una carga arbitraria de archivos sin restricciones y sin autenticación que permite a atacantes no autenticados obtener RCE e...

CVE-2019-19781

CVE-2019-19781 Citrix Netscaler RCE...

CVE-2020-13671

CVE-2020-13671 RCE via File Upload — Drupal Core Software: Drupal Core 8.7.5 Affected: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type CISA KEV: Yes — Known Exploited Vulnerability Advisory: SA-CORE-2020-012 What is Drup...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server para Windows 0.1 permite a atacantes remotos provocar una denegación de servicio mediante una solicitud HTTP para el nombre de un dispositivo MS-DOS. Referencia externa en https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez aka @alt3kx...

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — fonts.save RCE Probe CVE-2026-56290 BlackHat Team proof-of-concept scanner for the Joomla Page Builder CK fonts.save vulnerability. POC CVE-2026-56290 Author: @mrzblackhat Team: BlackHat Team Credits: Peyman Siyahi · MR.PERSIA Overview This tool probes Joomla sites running the...

CVE-2001-0933

CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:". Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...