CVE-2026-22557

🛡️ CVE-2026-22557 - Critical Path Traversal Vulnerability in Ubiquiti UniFi Network Application 📋 Overview A critical unauthenticated path traversal vulnerability CWE-22 exists in the Ubiquiti UniFi Network Application UniFi Controller. An attacker with network access can exploit this flaw to:...

CVE-2025-7955

CVE-2025-7955 RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentraladminlogin2faverify Function 🚨 CVE-2025-7955 | RingCentral Communications WordPress Exploit 📝 Vulnerability Overview CVE: CVE-2025-7955 Affected Plugin: RingCentral...

CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

CVE-2025-24813 - Apache Tomcat Partial PUT + Deserialization RCE 📋 Overview CVE-2025-24813 is a high‑severity vulnerability in Apache Tomcat that allows unauthenticated remote code execution when three conditions are met: 1. The default servlet has write access enabled readonly=false. 2. Partial...

cve-2026-7665

CVE-2026-7665 — Unauthenticated Information Disclosure in Essential Addons for Elementor...

mcp-pwn

CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution Summary MCPJam is an open-source MCP Model Context Protocol inspector and proxy used to connect, debug, and manage MCP servers. Versions = 1.4.2 expose the /api/mcp/connect endpoint without authentication or input validation. An...

CVE-2026-61946-Easy-Appointments-IDOR

CVE-2026-61946: One Appointment ID to Somebody Else's Booking I found an unauthenticated insecure direct object reference in the WordPress Easy Appointments plugin. The public reservation endpoint accepted an id from the query string and passed the resulting data into the plugin's database replac...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Summary Reference: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 is a relational database management system that provides the ability to compile and execute Java code directly within the SQL engine. The H2 driver parses JDBC URLs to...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass Educational PoC This repository provides an educational proof of concept for CVE-2026-9198 affecting IBM Langflow OSS. The PoC poc.py demonstrates how an unauthenticated attacker can chain: 1. GET/POST /api/v1/autologin return...

CVE-2026-60137_CVE-2026-63030

CVE-2026-60137 + CVE-2026-63030 — WordPress Unauthenticated RCE Vulnerability: REST Batch Route Confusion + WPQuery SQL Injection → Full RCE CVSS v3.1: 10.0 / 10.0 — CRITICAL | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1 | Patched: 6.9.5, 7.0.2 root@kitploit:...

cve-2025-24893

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ Unauthenticated Remote Code Execution in XWiki 🛠️ PoC implementation by @dollarboysushil 💡 Overview CVE-2025-24893 is a critical RCE vulnerability in XWiki, caused by unsafe Groovy expression handling inside the SolrSearch macro. An attacker...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

CVE-2026-3844

CVE-2026-3844 PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

CVE-2024-5084-Red-Team

🚀 HashForm Exploit – Lab Demo This repository contains a proof-of-concept exploit for CVE-2024-5084, a vulnerability found in the Hash Form WordPress plugin. It’s meant only for learning, lab testing, and security research. 📌 About the Vulnerability CVE ID: CVE-2024-5084 Issue: Unauthenticated fi...

watchTowr-vs-JunosEvolved-CVE-2026-21902

watchTowr-vs-JunosEvolved-CVE-2026-21902 Detection Artifact Generator for Juniper Junos Evolved CVE-2026-21902. https://github.com/user-attachments/assets/a7d667e1-7636-4097-ab3f-838944cdcccc See our blog post for technical details. Detection in Action root@kitploit: python...

CVE-2025-48703

CVE-2025-48703 CVE-2025-48703 is a critical vulnerability in CentOS Web Panel CWP that allows unauthenticated attackers to perform remote code execution RCE by bypassing authentication and executing system commands. The vulnerability affects CWP versions 0.9.8.1204 and earlier, and has been patch...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

CVE-2026-37069

CVE-2026-37069 Divulgación de Ruta Absoluta en /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado conocer en qué directorio del sistema se está ejecutando el código de la aplicación enviando una petició...

cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770: Langflow execglobals Remote Code Execution CVSS 9.8 Critical | ZDI-CAN-27325 | CWE-829: Inclusion of Functionality from Untrusted Control Sphere Overview CVE-2026-0770 is a critical unauthenticated remote code execution vulnerability in Langflow, a low-code application framework fo...