WP2Shell

WP2Shell - CVE-2026-63030 / CVE-2026-60137 Injection SQL du Batch de l'API REST WordPress vers une exécution de code à distance RCE Outil complet de découverte et d'exploitation de la vulnérabilité de l'endpoint Batch de l'API REST WordPress. Cet outil exploite une vulnérabilité critique...

CVE-2020-13935

استغلال ثغرة WebSocket في Apache Tomcat CVE-2020-13935 في المقالة المقابلة يتم شرح تحليل واستغلال الثغرة بالتفصيل. الاستخدام قم باستنساخ المستودع، ثم قم ببناء الملف الثنائي tcdos. قم بتشغيل البرنامج كما يلي لاختبار ما إذا كانت نقطة نهاية WebSocket معينة ضعيفة: $ git clone...

CVE-2024-36104-PoC

CVE-2024-36104-PoC Preuve de concept pour CVE-2024-36104, une vulnérabilité d'exécution de code à distance sans authentification dans Apache OFBiz versions antérieures à 18.12.14. Le ControlServlet d'OFBiz résout une vue non authentifiée forgotPassword avant de canonicaliser le chemin de la...

cve-2019-11477-poc

cve-2019-11477-poc اختبار بسيط 1. قم بتشغيل جهازين افتراضيين واحد لخادم SSL والآخر لعميل SSL 2. خادم قم بتشغيل تطبيق الخادم cd apps ./server.sh 7000 3. عميل قم بتثبيت الحزم المطلوبة sudo apt-get install libmnl-dev sudo apt-get install libnetfilter-queue-dev 4. عميل أضف سجلاً واحدًا إلى /etc/hosts...

sqlpad-rce-exploit-CVE-2022-0944

SQLPad RCE Exploit This repository contains an exploit script for CVE-2022-0944 in SQLPad, a vulnerability that allows for Remote Code Execution RCE via the /api/test-connection endpoint. Overview The provided script exploit.py demonstrates how to exploit the RCE vulnerability in SQLPad. The scri...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in...

SUSE-SU-2026:4498-1 Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in...

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header...

SUSE-SU-2026:4497-1 Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension...

exr-imageio-poc

exr-imageio-poc PoC for an integer overflow vulnerability in ImageIO patched in iOS/macOS 26.5 CVE-2026-28990 Bug discovered by Jiri Ha & Arni Hardarson The vulnerability There was an integer overflow in function EXRReadPlugin::decodeBlockAppleEXR prior to iOS/macOS 26.5 when calculating the size...

CVE-2022-37017

CVE-2022-37017 تجاوز المصادقة لكلمة مرور واجهة مستخدم العميل في Symantec Endpoint Protection 14.3.5351 يتيح Symantec Endpoint Protection تعيين حماية بكلمة مرور على واجهة المستخدم الخاصة به لمنع تغييرات التكوين. يتم تنفيذ هذا الفحص لكلمة المرور عبر منطق ليس في عملية محمية خفيفة Protected Process...

0xKern3lCrush

0xKern3lCrush أبحاث BYOVD على Windows في حالتين واقعيتين: برنامج Safetica ProcessMonitorDriver CVE-2026-0828 وبرنامج ThrottleStop driver الذي استغله MedusaLocker CVE-2025-7771. توثّق المستودع الواجهات المكشوفة، والنتيجة ذات الامتيازات التي يصل إليها كل منها، وكيفية اكتشاف الاستغلال. وهي تشحن...

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

Ghost Arbitrary File Read Exploit CVE-2023-40028 Overview This script exploits a vulnerability in Ghost CMS CVE-2023-40028 to read arbitrary files from the server. By leveraging a symlink in an uploaded ZIP file, an attacker can gain unauthorized access to sensitive files on the system. Features ...

heimdall-unauth-ssrf

Heimdall: Unauthenticated SSRF via testconfig Description...

Exploit for CVE-2026-105314

Papermerge-core: Authenticated Path Traversal to Arbitrary Fil...

gha-lab-5511dc3f73

Artéfact de recherche automatisé — pas le projet en amont. Ce dépôt est un laboratoire jetable construit par un harnais automatisé pour un mémoire de maîtrise à l'Université Laval sur la reproduction de vulnérabilités publiées dans les workflows GitHub Actions. Il s'agit d'un instantané verbatim ...

CVE-2018-12613

CVE-2018-12613 Local file inclusion bug due to filter bypass using %253f character. Software Affected 1. PHPMyAdmin v.4.8.0 2. PHPMyAdmin v.4.8.1 How to use This PowerShell scripts need three parameters to craft a exploit HTTP request: 1. PHPMyAdmin URL endpoint 2. Cookies for an authenticated us...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang انضم إلينا للحصول على ثغرات EXP POC بشكل دوري CVE-2024-23692-RCE-EXP CVE-2024-23692 ثغرة تنفيذ الأوامر عن بعد في خادم Rejetto HTTP HFS FOFA "HttpFileServer" ملاحظات النطاق المتأثر هو إصدارات HFS 2.3 وما دون طريقة الاستخدام How To Use ulimit -n...

SUSE-SU-2026:24093-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc127228...