Safer_PoC_CVE-2022-22965

SaferPoCCVE-2022-22965 A Safer PoC for CVE-2022-22965 Spring4Shell Functionality Creates a file called CVE2022-22965exploited.txt in the tomcat directory 'webapps/ROOT' Option user argument to change the output directory Exploit validation is performed by requesting the output .txt file, dependin...

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

cve-2019-0227

cve-2019-0227 Apache Axis 1.4 remote code execution vulnerability You need to set up a listener on the local machine with msf, and also modify lines 24-30 of the code. ＃You need to change these variables to match your configuration myip = “ 192.168.0.117 ” ＃Your machine's IP target = “...

CVE-2018-14716

CVE-2018-14716 PoC for CVE-2018-14716 Exploit Title: Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection Date: 2018-07-20 Software Link: https://github.com/nystudio107/craft-seomatic Exploit Author: Sebastian Kriesten 0xB455 Contact: https://twitter.com/0xB455 CVE: CVE-2018-14716...

EUVD-2026-98086

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

EUVD-2026-98089

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

EUVD-2026-98090

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

EUVD-2026-98088

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...

EUVD-2026-98087

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information...

CVE-2026-75782

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

CVE-2026-75076

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

CVE-2026-75095

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-75621

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...

CVE-2026-75076 IBM Aspera Enterprise Webapps Information Disclosure

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

CVE-2026-75076

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to an information disclosure flaw. The root cause is the exposure of JavaScript source map files , which could allow a remote attacker to obtain sensitive information. This vulnerability is associated with CWE-200 . Remedia...

CVE-2026-75095

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to a Denial of Service (DoS) attack. The root cause is uncontrolled resource consumption (CWE-400), which allows a remote attacker to exhaust resources and disrupt the service. The vulnerability has a CVSS v3.1 score of 7.5...

CVE-2026-75095 IBM Aspera Enterprise Webapps Denial of Service

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-75621

IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 are vulnerable to a security issue where a local attacker could obtain sensitive information. The root cause is the assignment of excessive permissions to a service account (CWE-250). To remediate this vulnerability, IBM strongly recommen...

CVE-2026-75621 IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account...