CVE-2022-46169

CVE 2022-46169 This script exploits an unauthenticated command injection vulnerability in Cacti versions through 1.2.22 in order to achieve unauthenticated remote code execution and gain a reverse shell...

CVE-2025-6389

CVE-2025-6389 Sneeit Framework , | | | \ / | | / /| || / / | | | | | / / | / || |||/|/ // / //...

PoC-CVE-2026-23744

PoC-CVE-2026-23744 Remote Code Execution on MCPJam Inspector Reference https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...

PoC-CVE-2026-33017

CVE-2026-33017: Unauthenticated RCE in Langflow = 1.8.2 Description A critical code injection vulnerability exists in Langflow that allows an unauthenticated remote attacker to execute arbitrary Python code on the server. The vulnerability resides in the POST /api/v1/buildpublictmp/flowid/flow...

CVE-2026-73450

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...

CVE-2025-15403

CVE-2025-15403 RegistrationMagic 📡 The intel drops here first. Follow @KNxploited on Telegram — precision CVE disclosures, working exploits, and deep-dive vulnerability research. The channel for those who don't wait for the news — they make it. 🧠 Overview CVE-2025-15403 is a CVSS 9.8 Critical...

cve-2023-22515

CVE-2023-22515 Ici est décrite la logique d'exploitation de la vulnérabilité, via Burp Suite. Pour l'exploitation, il est nécessaire de modifier la valeur de l'attribut bootstrapStatusProvider.applicationConfig.setupComplete à false, c'est-à-dire envoyer la requête : Bascule de Confluence en mode...

CVE-2026-20217

ZendTo 6.15-8 / ClamAV exact-profile RCE and root-variant reproduction This directory is a standalone, authorized-lab reproduction bundle for the no-account ZendTo-to-ClamAV code-execution chain and its separate default- profile Smarty/root-cron continuation. It includes: the complete runnable Po...

CVE-2025-62593-PoC

CVE-2025-62593 — Ray Remote Code Execution unauthenticated Proof-of-concept for CVE-2025-62593 , an unauthenticated Remote Code Execution vulnerability in the Ray distributed AI compute engine, abused via browser-based DNS-rebinding attacks. It was added to the CISA Known Exploited Vulnerabilitie...

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. Affected: 11.0.19+, 10.1.53+, 9.0.116+. Fixed in: 11.0.21, 10.1.54, 9.0.117. Found and reported by Bartlomiej Dmitruk striga.ai. Writeup:...

CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins is an open source automation server. It helps automate the parts of software development related to building, testing, and deploying, facilitating continuous integration, and continuous delivery. CVE-2024-23897Arbitrary File Read Vulnerability Jenkins 2.441 and earlier, LTS 2.426.2 and...

CVE-2025-63589

CVE-2025-63589 XSS Reflejado en el manejo de rutas de index.php de CMSimpleXH Descubierto: 6 de octubre de 2025 Productos: CMSimpleXH CMS de archivo plano de código abierto Versiones afectadas: 1.8 CVEs: CVE-2025-63589 Autenticación requerida: Ninguna sin autenticar Tipo de ataque: Cross-Site...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

CVE-2024-4040-CrushFTP-server

CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi-protocol, multi-platform file transfer server. CVE-2024-4040 - A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read any...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U is a multi-protocol file server capable of sending and receiving files from other networked computers through various means. CVE-2024-28995 is an unauthenticated directory transversal vulnerability in SolarWinds Serv-U that wou...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager provides a central platform for storing build artifacts CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository manager that allows an attacker to craft a URL to return any file as a download,...

CVE-2025-3248

CVE-2025-3248 Langflow is a low-code platform primarily used for building and deploying AI agents and workflows. It simplifies the development process by providing a visual interface for creating complex AI applications, including chatbots, RAG Retrieval-Augmented Generation systems, and more...

PSO - Printer Security Offensive

🖨️ PSO - Seguridad Ofensiva de Impresoras Versión 0.4.0 | Registro de cambios "Nmap para Impresoras" - Herramienta de seguridad ofensiva para pentesting de impresoras. Rápido. Enfocado. Sin bloat. ⚠️ Aviso Legal PSO incluye funciones de evaluación y explotación. Siempre obtenga autorización...

CVE-2019-13025

Connect Box CH7465LG CVE-2019-13025 Information This repository contains two PoCs for the Connect Box CH7465LG running on Firmware CH7465LG-NCIP-6.12.18.24-5p8-NOSH or older. For more information have a look at my blog. Usage Unauthenticated Remote Code Execution $ python3 poc-rce.py...