CVE-2026-0300

🚨 CVE-2026-0300 - Critical Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Buffer Overflow in User-ID™ Authentication Portal Captive Portal — Actively Exploited in the Wild 📋 Overview A critical buffer overflow vulnerability CWE-787 in the User-ID Authentication Portal of PAN-O...

log4j2-test

Log4j2 2.14.1 LDAP Remote Code Execution Vulnerability CVE-2021-44228 Verification 🎈 Tested on Spring Boot 2.x environment Vulnerability advisory https://nvd.nist.gov/vuln/detail/CVE-2021-44228 target-server pom.xml : Downgraded Log4j2 version to a vulnerable version 17 2.14.1 LoggingController :...

CVE-2020-8816

CVE-2020-8816 Pi-hole Remote Code Execution authenticated Version = 4.3.2 Usage python3 CVE-2020-8816.py -u http://10.10.10.10 -i 10.10.14.172 -p 1337 -pass admin Example More info https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/...

CVE-2020-8289

CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backblaze Summary Name: Remote Code Execution as SYSTEM/root via Backblaze CVE: CVE-2020-8289 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: Critical Discovery Date: 2020-03-13...

cve-2022-24112

Apache APISIX 2.12.1 Remote Code Execution and Docker Lab Let's clone using gitclone this repository, then we can navigate to apisix-docker/examples. In this docker-compose.yml file, we already change into image: apache/apisix:2.12.0-alpine, because the vulnerability in this version, then let's...

cve-2021-41773-exploration

Overview CVE-2021-41773 is a path traversal vulnerability discovered in Apache HTTP Server 2.4.49 in October 2021. The root cause was a failure to properly normalize dot sequences ended into the URL before checking whether requested path stayed within the web root. This vulnerability allowed an...

CVE-2025-6218-POC

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook Program Code Lua + Python trigger -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" local a = 1 end...

CVE-2017-7269

CVE-2017-7269 Vulnerability ID: CVE-2017-7269 Discoverers: Zhiniang Peng and Chen Wu Information Security Laboratory, School of Computer Science and Engineering, South China University of Technology Description: IIS 6.0 does not enable WebDAV by default. Once WebDAV support is enabled, servers...

TryHackMe-Atlassian-CVE-2022-26134

TryHackMe | Atlassian, CVE-2022-26134 TryHackMe Atlassian CVE-2022-26134 Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability. Task 1 Introduction Confluence | Your Remote-Friendly Team Workspace | Atlassian NVD -...

CVE-2026-6279

╔══════════════════════════════════════════════════════════════╗ ║ CVE-2026-6279 · Avada Builder = 3.15.2 ║ ║ Unauthenticated RCE via calluserfunc ║ ╚══════════════════════════════════════════════════════════════╝ 📋 Summary Field| Detail ---|--- CVE ID| CVE-2026-6279 Affected| Avada Builder Fusio...

CVE-2025-66478

1 POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

CVE-2026-22692

CVE-2026-22692: Critical Twig Sandbox Bypass via collect-mapInto allowing RCE/LFI/XXE October CMS Overview Field| Details ---|--- CVE ID| CVE-2026-22692 Severity| Moderate CVSS:3.1 4.9 Advisory| GHSA-m5qg-jc75-4jp6 Affected Product| October CMS RCE, LFI, XXE Discovered by| Lukasz Rybak CWE...

CVE-2024-3273

CVE-2024-3273 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2024-3273, a security vulnerability discovered in D-Link NAS devices. The vulnerability allows attackers to execute arbitrary commands on vulnerable devices. Description CVE-2024-3273 is a vulnerability in...

CVE-2025-25347

CVE-2025-25347 Overview This tool is used to test the vulnerability CVE-2025-25347 in QingLong Panel, an open-source platform for task automation management. This vulnerability allows Remote Code Execution RCE because the panel does not implement adequate input validation and access control on...

PunchingBag-for-React2Shell

🥊 PunchingBag - CVE-2025-55182 Security Research Platform ⚠️ EDUCATIONAL PURPOSE ONLY : This is an intentionally vulnerable application designed for authorized security research and CTF challenges. Do NOT use these techniques on unauthorized systems. A deliberately vulnerable Next.js 15.1.6...

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 STEP 1: Demo vulnerable web-app LAB We create logic similar to CVE-2025-55182 unsafe server-side execution. 📁 vulnapp/app.py from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data = request.json.get"component" ❌ VULNERABLE: user...

CVE-2021-44228

CVE-2021-44228 Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x has other vulnerabilities, it is recommended to update to the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: Download this project, compi...

CVE-2024-29973

CVE-2024-29973 GET /cmd,/simZysh/registermain/setCookie?c0=storageextcgi+CGIGetExtStoInfo+None+and+False+or+import"subprocess".checkoutput"id",+shell=True%23 HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: / Accept-Language: en-US,en;q=0...