jinjava-cve-2026-25526-poc

Step-by-step exploit all 9 steps: mvn exec:java -Dexec.mainClass=ExploitHarness -q 2. Final exploit chains file creation, file read, info disclosure: mvn exec:java -Dexec.mainClass=ExploitFinal -q 3. File content exfiltration reads /etc/passwd, /etc/hosts: mvn exec:java...

CVE-2023-22527

CVE-2023-22527 This repository presents a proof-of-concept of CVE-2023-22527 CVE-2023-22527 | RCE using SSTI in Confluence Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on confluence instances they don't own. This tool has been developed for...

fbconsulting_v0_chat

Chat SDK Chat SDK is a free, open-source template built with Next.js and the AI SDK that helps you quickly build powerful chatbot applications. Read Docs · Features · Model Providers · Deploy Your Own · Running locally Features Next.js App Router Advanced routing for seamless navigation and...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — Path Traversal in InvenTree Report Templates Advisory: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 Severity: Medium Published: 2026-03-20 Credit: @alonaki Description A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary files from t...

CVE-2026-30952-PoC

CVE-2026-30952: LiquidJS Path Traversal PoC This repository contains a Proof of Concept PoC for CVE-2026-30952 , a high-severity path traversal vulnerability discovered in the liquidjs library versions 10.25.0. Authors & Researchers: Moriel Harush Maor Caplan Description The vulnerability allows...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E Description A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.Most recent supported...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Vulnerabilidad de ejecución remota de código no autenticada en WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data...

Payload-and-Polyglot-Lists

Listas de Payloads y Políglotas ¿Encontraste un payload que no funciona? Por favor abre un issue con el payload, el contexto objetivo y lo que esperabas que sucediera. Las solicitudes de extracción con correcciones o nuevos payloads siempre son bienvenidas. La investigación está en curso. Este...

OSCP-Exam-Report-Template-Markdown

Offensive Security Exam Report Template in Markdown I created an Offensive Security Exam Report Template in Markdown so LaTeX, Microsoft Office Word, LibreOffice Writer are no longer needed during your Offensive Security OSCP, OSWE, OSEE, OSWP, OSEP, OSED, OSWA, OSDA, OSMR, OSTH, OSIR exam! Now y...

CVE-2025-69604

CVE-2025-69604 Descripción Esta vulnerabilidad es similar a la descrita en CVE-2025-61229 – un atacante puede editar la plantilla de tareas para que las tareas de copia de seguridad de SuperDuper instalen un paquete arbitrario. El paquete puede entonces ejecutar scripts de shell como usuario root...

CVE-2026-25731

Templite 엔진의 서버 사이드 템플릿 인젝션 SSTI 심각도: 높음 CVSS 7.8 영향을 받는 소프트웨어: calibre 패치 버전: 9.2.0 권고: GHSA-xrh9-w7qx-3gcc 요약 Calibre의 Templite 템플릿 엔진에서 발견된 서버 사이드 템플릿 인젝션SSTI 취약점으로 인해, 사용자가 --template-html 또는 --template-html-index 명령줄 옵션을 통해 악성 사용자 정의 템플릿 파일을 사용하여 전자책을 변환할 때 임의 코드 실행이 가능합니다. 세부 사항 Templite...

astro_CVE-2026-33532

Astro Starter Kit: Minimal root@kitploit: npm create astro@latest -- --template minimal 🧑‍🚀 Seasoned astronaut? Delete this file. Have fun! 🚀 Project Structure Inside of your Astro project, you'll see the following folders and files: root@kitploit: / ├── public/ ├── src/ │ └── pages/ │ └──...

Ultimate-CVE-2026-61511

CVE-2026-61511 – 개념 증명 교육 및 방어를 위한 개념 증명PoC – vBulletin 취약점 CVE-2026-61511 노출 여부 검증용 인증 없는 원격 코드 실행. 연락처 Telegram: https://t.me/thecodeb0ss 개요 이 저장소는 vBulletin 취약점 CVE-2026-61511 에 대한 방어적 탐지 및 검증 개념 증명 을 제공합니다. 공개된 보안 연구에 따르면, CVE-2026-61511 은 특정 조건에서 인증 없는 원격 코드 실행RCE으로 이어질 수 있는 vBulletin 템플릿 런타...

OpenNebula-CVE-2025-56537

OpenNebula-CVE-2025-56537 Título del Exploit : OpenNebula 6.10.0.1 - XSS Almacenado Cross-site Scripting en plantilla de red virtual Autor del Exploit : Mark Artamonov Página del Proveedor : https://opennebula.io/ Versión Probada : OpenNebula 6.10.0.1 Versiones Afectadas : OpenNebula Prueba de...

cve-2026-4257

CVE-2026-4257 이것은 Supsystic의 "Contact Form" Wordpress 플러그인 버전 1.7.36 및 이전 버전에서 발견된 서버 측 템플릿 인젝션SSTI 취약점인 CVE-2026-4257을 악용합니다. 이 취약점으로 인해 인증되지 않은 공격자가 원격 코드 실행을 달성할 수 있습니다. 이 취약점은 formsViewCfs 클래스의 generateHtml 함수에 존재하며, 이 함수는 적절한 유형의 Contact Form 필드 매개변수 중 하나를 통해 사용자 제어 입력을 받아들입니다. Ubuntu 24.04 ...

BITB

BITB Plantillas de navegador para el ataque Browser In The Browser BITB. Más información: https://mrd0x.com/browser-in-the-browser-phishing-attack/ Uso Cada carpeta tiene un archivo index.html que tiene 4 variables que deben modificarse: XX-TITLE-XX - El título que se muestra en la página ej...

CVE-2026-34724

🚨 CVE-2026-34724 - Zammad 7.0.1 - Серверная инъекция шаблонов SSTI с удалённым выполнением кода RCE через AI-агента 📌 Обзор Zammad — популярная open-source веб-система для службы поддержки helpdesk и обслуживания клиентов. CVE-2026-34724 — это уязвимость серверной инъекции шаблонов SSTI в новой...

internal-security-detect

Internal Security Detection via Safebase Exposed SafeBase portals serve two audiences at once: prospects who need proof of your security posture, and security researchers blue and red teamers. Each green tick reveals a control that supposedly exists today; every missing tick is an equally loud hi...

ExportHider

ExportHider ExportHider genera una plantilla de DLL en C++ que contiene un stub de código que te permite ocultar Funciones Exportadas del Directorio de Exportación de la DLL en el sistema de archivos. Después de colocar las definiciones de funciones y compilar el archivo, no verás las funciones d...