1123210 matches found
CVE-2026-45829
🚨 CVE-2026-45829 - ChromaDB Pre-Auth RCE Critical Remote Code Execution in ChromaDB Vector Database 📌 Overview CVE-2026-45829 is a critical pre-authentication Remote Code Execution vulnerability in ChromaDB , a popular open-source AI Vector Database. An unauthenticated attacker can exploit the wa...
CVE-2022-23529-Exploration
CVE-2022-23529 Las versiones de la librería JSON Web Token JWT anteriores a 3.4.6, 4.0.4 y 4.1.5 son vulnerables a RCE. Las funciones hash HMAC aceptan cualquier cadena como entrada, lo que conduce a RCE. Debido a las condiciones previas, es probable que esta vulnerabilidad no sea explotable. Par...
CVE-2026-76720
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...
CVE-2026-76719
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-76718
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
laravel-rce-cve-2018-15133
laravel-rce-cve-2018-15133 CVE-2018-15133...
CVE-2025-55182-React2Shell
CVE-2025-55182-React2Shell xpl0ited by infrar3d Una vulnerabilidad de gravedad crítica 10.0 que afecta el uso del lado del servidor de React.js, registrada como CVE-2025-55182 en React.js y CVE-2025-66478 específicamente para el framework Next.js. Esta vulnerabilidad fue divulgada de manera...
CVE-2026-37149
CVE-2026-37149 Inyección SQL en GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 Resumen CVE ID: CVE-2026-37149 Tipo de vulnerabilidad: Inyección SQL CWE-89 Gravedad: Alta Descubridor: Dhyey Patel Descripción GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0...
cve-2010-2075-analysis
CVE-2010-2075 – Backdoor de Ejecución Remota de Código en UnrealIRCd Resumen Este repositorio documenta el análisis y la explotación de CVE-2010-2075, una vulnerabilidad de backdoor que afecta a UnrealIRCd 3.2.8.1. La vulnerabilidad se reprodujo en un entorno de laboratorio controlado utilizando...
CVE-2019-0230-PoC
CVE-2019-0230 CVE-2019-0230 Exploit Este es el Exploit de CVE-2019-0230 : uso python3 cve-2019-230.py ejemplo: python3 cve-2019-0230-poc.py pentest.com whoami Testing pentest.com! Command being passed for RCE: whoami 2020/10/22/...
CVE-2017-0144
🔵 EternalBlue CVE-2017-0144 Critical Microsoft SMBv1 Remote Code Execution Vulnerability 📌 Overview EternalBlue is a critical vulnerability in Microsoft's Server Message Block version 1 SMBv1 protocol that allows remote attackers to execute arbitrary code on vulnerable Windows systems without...
HFS_EXPLOIT_PROJECT
HFSEXPLOITPROJECT Metasploit RCE en HFS 2.3 - CVE-2014-62 🔖 Título del Proyecto Ejecución Remota de Código a través de HTTP File Server HFS 2.3 ⚙ Herramientas Utilizadas • Kali Linux • Nmap • Metasploit • Objetivo: HFS 2.3 en Windows 7 🔐 Detalles de la Vulnerabilidad • Nombre: CVE-2014-6287 • Tip...
CVE-2026-76720 HPE OneView - URL Redirect vulnerability
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...
EUVD-2026-88700
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...
CVE-2026-76720
A vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that can be remotely exploited to cause a URL redirect . This flaw also carries a potential risk of Cross-Site Scripting (XSS) . To resolve this vulnerability, HPE provides a software update; users should update to ...
LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298
LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...
CVE-2026-48017
CVE-2026-48017 — Remote Code Execution in DbGate via functionName injection Severity : High CVSS 8.8 CWE : CWE-94 — Improper Control of Generation of Code 'Code Injection' Affected : dbgate-api ≤ 7.1.8 patched in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...
CVE-2026-15390
Das U-Boot is vulnerable to an out-of-bounds write when the CONFIG_IP_DEFRAG=y parameter is enabled. The root cause is a failure to clear the IP reassembly state after a complete datagram is delivered. An attacker capable of delivering fragmented IP traffic can achieve arbitrary code execution by...
