Pinned Loading

1. 0-click-RCE-Exploit-for-CVE-2023-51409 0-click-RCE-Exploit-for-CVE-2023-51409 Public

   Unauthenticated 0-click RCE exploit for CVE-2023-51409. Abuses an arbitrary file upload flaw in the AI Engine WordPress plugin to upload a PHP webshell and achieve remote command execution without …

   PHP 1

2. 0-click-RCE-Exploit-for-CVE-2024-51793 0-click-RCE-Exploit-for-CVE-2024-51793 Public

   Unauthenticated 0-click RCE exploit for CVE-2024-51793. Exploits an arbitrary file upload vulnerability via admin-ajax.php to upload a PHP payload and achieve remote command execution on vulnerable…

   PHP 1

3. 0-click-RCE-Exploit-for-CVE-2024-51791 0-click-RCE-Exploit-for-CVE-2024-51791 Public

   Unauthenticated 0-click RCE exploit for CVE-2024-51791. Exploits an arbitrary file upload vulnerability in a vulnerable WordPress forms plugin to upload a PHP payload, locate the uploaded file, det…

   PHP 1

4. Command-Injection-RCE-PyGlove-v0.4.5 Command-Injection-RCE-PyGlove-v0.4.5 Public

   Command Injection / Remote Code Execution (RCE) via Insecure Deserialization in decode() of json_conversion.py in PyGlove v0.4.5 - (github.com/google/pyglove)

   Python 1

5. Command-Injection-RCE-Vertex-AI-SDK-v1.121.0 Command-Injection-RCE-Vertex-AI-SDK-v1.121.0 Public

   Command Injection / Remote Code Execution (RCE) via Insecure Deserialization in load() of predictor.py in Vertex AI SDK v1.121.0 - (github.com/googleapis/python-aiplatform)

   Python

6. Command-Injection-RCE-AlphaFold-v3.0.1 Command-Injection-RCE-AlphaFold-v3.0.1 Public

   Command Injection / Remote Code Execution (RCE) via Insecure Deserialization in _load_ccd_pickle_cached() of chemical_components.py in AlphaFold 3 (v3.0.1) - (github.com/google-deepmind/alphafold3)

   Python