pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. This was the first publicly-released exploit for CVE-2009-1151. Syntax $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo $ ./phpMyAdminRCE.sh...

CVE-2024-21534

CVE-2024-21534: Remote Code Execution Vulnerability in jsonpath-plus =10.0.7 Summary This repository contains a Proof of Concept PoC exploit for a critical Remote Code Execution RCE vulnerability in the jsonpath-plus package, affecting versions prior to 10.0.7. The issue stems from improper input...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE lab End-to-end working RCE exploit + reproducible lab for CVE-2019-13132 , a stack buffer overflow in libzmq's CURVE INITIATE handshake handler. An attacker who knows the server's long-term public key a public parameter by design can...

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · OS Command Injection → RCE Researcher: K Disclosure Type: Responsible Disclosure Status: Patched Affected Product: Chamilo LMS 2.0 Confirmed on v1.11.32 📋 Vulnerability Summary Field| Details ---|--- Product| Chamilo LMS Affected Version| 2.0 Confirmed on v1.11.32...

CVE-2026-6009

⚠️ Avertissement : Ce dépôt est destiné à des fins éducatives et à des tests de sécurité autorisés uniquement. Ne pas utiliser contre des systèmes dont vous n'êtes pas propriétaire ou pour lesquels vous n'avez pas d'autorisation écrite explicite. CVE-2026-6009 Preuve de concept Résumé La...

CVE-2026-103395 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

CVE-2026-103395 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

EUVD-2026-89990

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

CVE-2026-103395 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

CVE-2026-103395

Versions of LightLLM through 1.2.0 with visual_only deployments are vulnerable to Unauthenticated Remote Code Execution (RCE) . The issue stems from an exposed RPyC service where the allow_pickle option is enabled, allowing the remote_infer_images method to deserialize untrusted arguments. An att...

GHSA-VCVR-R3JV-PC5J Next.js: Remote Code Execution in next/og ImageResponse

Impact The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: tsx import ImageResponse from...

NPM: Next.js: Remote Code Execution in next/og ImageResponse

NPM: Next.js: Remote Code Execution in next/og ImageResponse vulnerability discovered by ? in WordPress Npm next versions = 16.2.0, 16.3.6...

Next.js: Remote Code Execution in next/og ImageResponse

Impact The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: tsx import ImageResponse from...

PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules

An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...

gimp: GIMP: Remote code execution via PSD file parsing integer overflow

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the readchanneldata function during PSD Photoshop Document file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...