CVE-2026-108921

The KusalkaSilva Learning-Management-System is vulnerable to a missing authentication flaw in the State-Changing Endpoints component. Specifically, the mysql_query function within the remove_announcements.php file fails to properly authenticate requests when the ID argument is manipulated. This v...

CVE-2026-108921 KusalkaSilva Learning-Management-System State-Changing Endpoints remove_announcements.php mysql_query missing authentication

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...

CVE-2018-8284-Sharepoint-RCE

CVE-2018-8284-Sharepoint-RCE...

cve-2019-3396

cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 setup exploit libraries bundle install run ┌──user㉿hostname-/path/to/cve-2019-3396 └─$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahman and Omar and Alaa Usage: rub...

CVE-2020-35729

Information Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...

CVE-2021-24155.rb

WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...

CVE-2026-13768

CVE-2026-13768: Privileged IoT Hub Credential — Fleet Enumeration, Device RCE, and Home-Network Pivot Advisory Field| Value ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 Critical Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L Vector 4.0|...

CVE-2022-1388

Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...

nmap_draytek_rce

nmapdraytekrce nmap script to detect CVE-2020-8515 on Draytek Devices...

CVE-2026-108920

The SourceCodester Drug Recommendation System 1.0 is vulnerable to cross-site scripting (XSS) within the Admin Record Tables component. The vulnerability exists in an unspecified function of the Admin/user_record.php file, where the manipulation of the name/email argument allows for remote execut...

EUVD-2026-97759

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/userrecord.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be launch...

CVE-2026-108920 SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross site scripting

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/userrecord.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be launch...

CVE-2022-24355

CVE-2022-24355 Tplink wr841 v10 rce exploit without authorisation ⚠️ Disclaimer The code in this repository is provided as-is for educational and defensive security research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any...

Torito-R2S

Torito React2Shell Scanner & Exploit Tool CVE-2025-55182 / 66478 Detection-first scanner for Next.js RSC targets with optional PoC confirm and exploit/shell modes. Use only on systems you are authorized to test. Requirements Python 3.9+ pip install -r requirements.txt Subfinder binary in PATH for...

CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105 API curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Output: Attack curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Output: Logs: Reference: https://vulners.com/cve/CVE-2021-45105...

CVE-2024-25600

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-25600 Exploit WordPress plugin Bricks Builder has RCE vulnerability CVE-2024-25600 WordPress plugin Bricks Builder RCE vulnerability CVE-2024-25600 exploit script, multi-POC hybri...

CVE-2026-108917

A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclos...

CVE-2026-108918

A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The...

CVE-2026-108916

A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-108915

A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was...