SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- Esta es una versión editada del exploit CVE-2018-19422 para corregir un pequeño pero molesto problema que tuve. Tuve que usar este exploit en un CTF, pero no lograba que funcionara correctamente; simplemente no dejaba de fallar al iniciar sesión. Después de...

CVE-2026-105263

Shaarli versions up to 0.16.3 are vulnerable to a server-side request forgery (SSRF) flaw in the Admin Metadata Endpoint . The root cause is located in the MetadataController function within the file application/front/controller/admin/MetadataController.php, where a manipulation of the url argume...

CVE-2026-105263 Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgery

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...

CVE-2023-38545

Uso git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv Prueba para más detalles, consulte: este enlace ...

CVE-2025-24893-POC

CVE-2025-24893-POC Un POC para CVE-2025-24893 escrito en python Uso python3 -u the url...

CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

CVE-2026-101002

A security flaw exists in Netcore NBR200V2 version 1.3.241127.071246 . The vulnerability is located in the Tools Ping Handler component, specifically within the system function of the /usr/bin/network_tools file. By manipulating the url argument, an unauthenticated remote attacker can trigger an ...

CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

EUVD-2026-88084

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

CVE-2026-100901

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. The manipulation of the argument url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

EUVD-2026-88068

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. The manipulation of the argument url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2026-100901 athlon1600 youtube-downloader stream.php stream server-side request forgery

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. The manipulation of the argument url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2026-100901 athlon1600 youtube-downloader stream.php stream server-side request forgery

A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. Affected by this vulnerability is the function stream of the file public/stream.php. The manipulation of the argument url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2026-100893

A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. This vulnerability affects the function opengraph::fetch of the file src/api/resource.rs of the component opengraphicparse Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-101002: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

EUVD-2026-83802

A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/networktools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection. The attack may be...

CVE-2026-94095: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/networktools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection. The attack may be...

CVE-2026-94028

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.modeldump of the file mealie/routes/households/controllergrouprecipeactions.py of the component Recipe Action Trigger. Executing a manipulation of the argument url can lead to server-side reques...

CVE-2026-94028 mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery

A weakness has been identified in mealie-recipes Mealie up to 3.25.1. Affected is the function payload.modeldump of the file mealie/routes/households/controllergrouprecipeactions.py of the component Recipe Action Trigger. Executing a manipulation of the argument url can lead to server-side reques...

PT-2026-96014

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246 Description An issue exists in the Traceroute Diagnostic Feature within the /usr/bin/network tools file. A remote attacker can trigger command injection by manipulating the url argument. Command...