HexBrain
Sign in

Browse / Code Execution

Code Execution

831disclosed reports
11weaknesses
$607,058paid in bounties

See it on the mapBypass libraryPayloads

Weaknesses in this class

Often found together with

Most upvoted Code Execution reports

AllValidInformativeN/ADuplicate

  1. Potential pre-auth RCE on Twitter VPNOS Command Injection · critical · X / xAI
    $20,1601,246 votes
  2. Exposed Kubernetes API - RCE/Exposed CredsOS Command Injection · critical · Snapchat
    $25,0001,191 votes
  3. RCE via npm misconfig -- installing internal libraries from the public registryCode Injection · critical · PayPal
    $30,000946 votes
  4. H1514 Remote Code Execution on kitcrm using bulk customer update of Priority ProductsCommand Injection - Generic · medium · Shopify
    830 votes
  5. Remote Code Execution on www.semrush.com/my_reports on Logo uploadCommand Injection - Generic · critical · Semrush
    824 votes
  6. Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' ApplicationCode Injection · critical · PlayStation
    $15,000780 votes
  7. Git flag injection - local file overwrite to remote code executionCommand Injection - Generic · critical · GitLab
    $12,000777 votes
  8. Webshell via File Upload on ecjobs.starbucks.com.cnOS Command Injection · critical · Starbucks
    688 votes
  9. RCE and Complete Server Takeover of http://www.█████.starbucks.com.sg/Code Injection · critical · Starbucks
    572 votes
  10. Privilege Escalation From user to SYSTEM via unauthenticated command execution Command Injection - Generic · critical · Ubiquiti Inc.
    553 votes
  11. Local files could be overwritten in GitLab, leading to remote command executionCommand Injection - Generic · critical · GitLab
    $12,000542 votes
  12. Remote Code Execution in Slack desktop apps + bonusCode Injection · critical · Slack
    509 votes
  13. RCE when removing metadata with ExifToolCode Injection · critical · GitLab
    $20,000508 votes
  14. RCE via unsafe inline Kramdown options when rendering certain Wiki pagesCode Injection · critical · GitLab
    $20,000427 votes
  15. Panorama UI XSS leads to Remote Code Execution via Kick/Disconnect MessageCode Injection · critical · Valve
    420 votes
  16. Remote code execution on Basecamp.comCommand Injection - Generic · critical · Basecamp
    $5,000417 votes
  17. H1514 Server Side Template Injection in Return Magic email templates?Code Injection · Shopify
    409 votes
  18. Remote Command Execution via Github importCommand Injection - Generic · critical · GitLab
    $33,510392 votes
  19. RCE via the DecompressedArchiveSizeValidator and Project BulkImports (behind feature flag)Command Injection - Generic · critical · GitLab
    $33,510387 votes
  20. [CVE-2022-44268] Arbitrary Remote Leak via ImageMagickRemote File Inclusion · critical · HackerOne
    371 votes
  21. RCE on build server via misconfigured pip installDownload of Code Without Integrity Check · critical · Yelp
    366 votes
  22. Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where)Code Injection · critical · Mozilla
    $12,000361 votes
  23. Arbitrary file read via ffmpeg HLS parser at https://www.flickr.com/photos/uploadCode Injection · critical · Flickr
    340 votes
  24. RCE via npm misconfig -- installing internal libraries from the public registryCode Injection · critical · Uber
    $9,000325 votes
  25. Code injection possible with malformed Nextcloud Talk chat commandsCode Injection · high · Nextcloud
    317 votes
  26. RCE on TikTok Ads PortalCode Injection · critical · TikTok
    312 votes
  27. Arbitrary Code Execution via npm misconfiguration – installing internal libraries from the public registryCode Injection · critical · LY Corporation
    $11,500288 votes
  28. RCE via github importOS Command Injection · critical · GitLab
    271 votes
  29. Attacker can add arbitrary data to the blockchain without paying gasDeserialization of Untrusted Data · critical · Rootstock Labs
    258 votes
  30. SQL Injection in www.hyperpure.comCode Injection · critical · Eternal
    $2,000229 votes
  31. RCE by command line argument injection to `gm convert` in `/edit/process?a=crop`Command Injection - Generic · critical · Imgur
    229 votes
  32. Test-scripts for postgis in mason-repository using unsafe unzip of content from unclaimed bucket creates potential RCE-issuesCommand Injection - Generic · critical · Mapbox
    209 votes
  33. Authenticated Elasticsearch Painless script execution via Query.search.sort_query on hackerone.com/graphqlCode Injection · high · HackerOne
    $7,000174 votes
  34. RCE of Burp Scanner / Crawler via Clickjacking Command Injection - Generic · high · PortSwigger Web Security
    $3,000172 votes
  35. Git flag injection leading to file overwrite and potential remote code executionCommand Injection - Generic · critical · GitLab
    $3,500169 votes
  36. Open memory dump method leaking customer information ,secret keys , password , source code & admin accountsExposed Dangerous Method or Function · critical · Stripo Inc
    158 votes
  37. Path traversal, to RCECommand Injection - Generic · high · GitLab
    $12,000142 votes
  38. Payload delivery via Social Media urls on H1 profileRemote File Inclusion · medium · HackerOne
    138 votes
  39. uber.com may RCE by Flask Jinja2 Template InjectionCode Injection · Uber
    $10,000137 votes
  40. Account takeover via insecure intent handling Deserialization of Untrusted Data · medium · Basecamp
    136 votes
  41. Send arbitrary PUT requests when user clicks on a linkCommand Injection - Generic · medium · GitLab
    135 votes
  42. Apache Flink RCE via GET jar/plan API EndpointCommand Injection - Generic · critical · Aiven Ltd
    $6,000134 votes
  43. Admin Panel Accessed (OAuth Bypassed ) Command Injection - Generic · critical · Mapbox
    $4,000133 votes
  44. Git flag injection - Search API with scope 'blobs' Command Injection - Generic · high · GitLab
    $7,000130 votes
  45. Remote Code Execution via Extract App PluginOS Command Injection · high · Nextcloud
    124 votes
  46. Urgent: Server side template injection via Smarty template allows for RCECode Injection · Unikrn
    122 votes
  47. SQL Injection + Insecure Deserialization leads to Remote Code Execution on https://krisp.aiDeserialization of Untrusted Data · critical · Krisp
    119 votes
  48. Unserialize leading to arbitrary PHP function invokeCode Injection · critical · Rockstar Games
    119 votes
  49. Remote Code Execution on Git.imgur-dev.com Code Injection · critical · Imgur
    119 votes
  50. Unrestricted File Upload on https://partner.tiktokshop.com/wsos_v2/oec_partner/uploadUnrestricted Upload of File with Dangerous Type · medium · TikTok
    118 votes
  51. Public instance of Jenkins on https://██████████/ with /script enabledCode Injection · critical · U.S. Dept Of Defense
    118 votes
  52. Remote Code Execution and AWS IAM Credentials Exfiltration in https://████████/Command Injection - Generic · critical · U.S. Dept Of Defense
    114 votes
  53. Remote Code Execution (Reverse Shell) - File ManagerCode Injection · medium · Concrete CMS
    114 votes
  54. OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)OS Command Injection · high · AWS VDP
    111 votes
  55. Team members can trigger arbitrary code execution in Slack Desktop Apps via HTML NotificationsCode Injection · high · Slack
    107 votes
  56. [hta3] Remote Code Execution on ████Code Injection · critical · U.S. Dept Of Defense
    104 votes
  57. Insecure Bundler configuration fetching internal Gems (okra) from Rubygems.orgCommand Injection - Generic · high · Basecamp
    $5,000102 votes
  58. Tricking the "Create snippet" feature into displaying the wrong filetype can lead to RCE on Slack usersUnrestricted Upload of File with Dangerous Type · high · Slack
    $1,500101 votes
  59. Remote Unrestricted file Creation/Deletion and Possible RCE.Code Injection · low · X / xAI
    100 votes
  60. No SearchEngine sanatizing can lead to command injectionCommand Injection - Generic · medium · Notepad++
    99 votes
  61. Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games.Malware · high · Valve
    $1,50099 votes
  62. [insideok.ru] Remote Command Execution via file upload.Command Injection - Generic · critical · ok.ru
    98 votes
  63. User-assisted RCE in Slack for macOS (from official site) due to improper quarantine meta-attribute handling for downloaded filesCode Injection · high · Slack
    97 votes
  64. LOGJ4 VUlnerability [HtUS]Command Injection - Generic · critical · U.S. Dept Of Defense
    $1,00094 votes
  65. Remote Code Execution in ██████OS Command Injection · critical · U.S. Dept Of Defense
    94 votes
  66. Unsafe deserialization leads to token leakage in PayPal & PayPal for Business [Android]Deserialization of Untrusted Data · medium · PayPal
    93 votes
  67. Injection in path parameter of Ingress-nginxCode Injection · high · Kubernetes
    91 votes
  68. CVE-2024-27281: RCE vulnerability with .rdoc_options in RDocCode Injection · high · Internet Bug Bounty
    $4,86088 votes
  69. Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-checkCommand Injection - Generic · high · GitHub
    88 votes
  70. Remote code execution [CVE-2023-36845]Code Injection · critical · MTN Group
    87 votes
  71. Authenticated Code Execution through Phar deserialization in CSV Importer as Shop manager in WooCommerceDeserialization of Untrusted Data · high · Automattic
    84 votes
  72. Remote Code Execution (RCE) in a DoD websiteCode Injection · critical · U.S. Dept Of Defense
    84 votes
  73. RCE on Wordpress websiteDeserialization of Untrusted Data · critical · Nextcloud
    83 votes
  74. OneLogin authentication bypass on WordPress sites via XMLRPCCode Injection · Uber
    $7,00083 votes
  75. In correct casting from size_t to int lead to heap overflow in mcrypt_genericCode Injection · Internet Bug Bounty
    $1,00081 votes
  76. Middleware Authentication Bypass on IBM PortalCommand Injection - Generic · critical · IBM
    80 votes
  77. Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection and audit-forwardCommand Injection - Generic · high · GitHub
    80 votes
  78. Pre-auth Remote Code Execution on multiple Uber SSL VPN serversCommand Injection - Generic · critical · Uber
    $2,00080 votes
  79. Entire database of emails exposed through URN injectionCode Injection · medium · LinkedIn
    79 votes
  80. Unrestricted File Upload at ██████████Unrestricted Upload of File with Dangerous Type · critical · Mars
    78 votes
  81. Two click Account Takeover Deserialization of Untrusted Data · high · Basecamp
    77 votes
  82. GitLab-Runner on Windows `DOCKER_AUTH_CONFIG` container host Command InjectionOS Command Injection · high · GitLab
    77 votes
  83. [CVE-2021-44228] nps.acronis.com is vulnerable to the recent log4shell 0-dayDeserialization of Untrusted Data · critical · Acronis
    $1,00076 votes
  84. HTML Injection in Business Name Parameter in PayappsCode Injection · medium · Autodesk
    75 votes
  85. CVE-2021-40870 on [52.204.160.31]Code Injection · critical · Elastic
    75 votes
  86. [forum.acronis.com] JNDI Code Injection due an outdated log4j componentOS Command Injection · critical · Acronis
    74 votes
  87. Public Jenkins instance with /script enabledCode Injection · critical · Ubiquiti Inc.
    74 votes
  88. RCE on facebooksearch.algolia.comCode Injection · Algolia
    $50074 votes
  89. Grafana LFI on https://grafana.mariadb.orgRemote File Inclusion · medium · MariaDB
    73 votes
  90. OSX slack:// protocol handler javascript injectionCommand Injection - Generic · Slack
    72 votes
  91. RCE on █████ via CVE-2017-10271Code Injection · critical · U.S. Dept Of Defense
    68 votes
  92. GMP Deserialization Type Confusion Vulnerability [MyBB <= 1.8.3 RCE Vulnerability]Code Injection · high · Internet Bug Bounty
    68 votes
  93. [RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182Code Injection · critical · IBM
    67 votes
  94. CVE-2023-5528: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodesCode Injection · high · Kubernetes
    $5,00067 votes
  95. Persistant Arbitrary code execution in mattermost androidCode Injection · high · Mattermost
    67 votes
  96. RCE + PAT Exfiltration via pull_request_target in privacy-configuration/auto-respond-pr.yml — Direct Supply Chain to All DDG BrowsersCode Injection · critical · DuckDuckGo
    66 votes
  97. Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Code Injection · Fastify
    66 votes
  98. Account Takeover / Arbitrary File read and deletion / Partial code execution (intent redirection)Code Injection · high · MercadoLibre
    66 votes
  99. Second-order SOQL injection through email and campaign name parameter in Salesforce lead submissionCode Injection · low · HackerOne
    64 votes
  100. Source Code and data exfiltration via Github CopilotCode Injection · low · GitHub
    63 votes