Marshall Whittaker

5 exploits Active since Jul 2010
CVE-2026-24479 EXPLOITDB CRITICAL ruby WORKING POC
hustoj < 26.01.24 - Path Traversal and Remote Code Execution via ZIP Archive Extraction
HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. Prior to version 26.01.24, the problem_import_qduoj.php and problem_import_hoj.php modules fail to properly sanitize filenames within uploaded ZIP archives. Attackers can craft a malicious ZIP file containing files with path traversal sequences (e.g., ../../shell.php). When extracted by the server, this allows writing files to arbitrary locations in the web root, leading to Remote Code Execution (RCE). Version 26.01.24 contains a fix for the issue.
CVSS 9.8
EIP-2026-102752 EXPLOITDB text WORKING POC
udisks2 2.8.0 - Denial of Service (PoC)
EIP-2026-101186 EXPLOITDB c WORKING POC
CenturyLink ZyXEL PK5001Z Router - Root Remote Code Execution
EIP-2026-100828 EXPLOITDB text WORKING POC
iOffice 0.1 - 'parametre' Remote Command Execution
CVE-2010-2626 EXPLOITDB text WORKING POC
Miyabi CGI Tools SEO Links 1.02 - Remote Command Execution via fn Parameter
index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information.