CVE-2022-1609

CVE-2022-1609 Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor How to install ? wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh How to use it ? NullBrunk$ ./exploit.sh http://127.0.0.1:8080 + Targeting http://127.0.0.1:8080 $ i...

CVE-2020-11108-PoC

CVE-2020-11108-PoC Two PoCs are in this repo. cve-2020-11108-rce.py will give you a shell as the www-data user. root-cve-2020-11108-rce.py will give you a shell and escalate privileges to root. Note: This is destructive as we must overwrite teleporter.php. For a full explanation/writeup please se...

pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 Copy Fail PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Mode Of Use ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se hace responsable...

CVE-2026-88877-PoC-pwnVader

CVE-2026-88877 — Traefik v3.7.0–v3.7.11 — Authentication bypass via from-to-www-redirect Author: pwnVader · License: MIT repository root | ---|--- Component| Traefik Kubernetes ingress-nginx provider, providers.kubernetesingressnginx Type| CWE-639 — Authorization bypass through user-controlled ke...

cve-2026-80428-ctf

CVE-2026-80428 CTF Training Lab Educational emulator of the vulnerability mechanics described in CVE-2026-80428 CWE-502: Deserialization of Untrusted Data. This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students,...

-CVE-2022-1609

CVE-2022-1609 Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor How to install ? wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh How to use it ? GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 + Targeting http://127.0.0.1:808...

CVE-2025-51471-POC

CVE-2025-51471 - Ollama Cross-Domain Token Exposure PoC Author: ajtazer 🔥 Overview This repository contains a Proof of Concept PoC for CVE-2025-51471 , a Cross-Domain Authentication Token Exposure vulnerability that affects all versions of Ollama including the latest. 📋 Vulnerability Description...

WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution

WordPress XML Sitemap Generator for Google plugin before 2.0.4 contains a cross-site scripting vulnerability that can lead to remote code execution. It does not validate a parameter which can be set to an arbitrary value, thus causing cross-site scripting via error message or remote code executio...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

LyLme-Spage - Arbitary File Upload

An arbitrary file upload vulnerability in the component /include/file.php of lylmespage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file. id: CVE-2024-34982 info: name: LyLme-Spage - Arbitary File Upload author: DhiyaneshDk severity: high description: | An arbitrary...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon sudo systemctl start docker.service Start Docker Containers To start the docker...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE An authenticated low-privileged user can exploit a command injection vulnerability to get code-execution as www-data and escalate privileges to root due to weak sudo rules. QuickBox Pro v2.1.8 and prior is vulnerable...

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...

CVE-2026-109619

CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-109618 / CVE-2026-109619 PHP session.uploadprogress Pre-Auth RCE PoC ★ Overview PHP2Shell CVE-2026-109618 / CVE-2026-109619 is an unauthenticated Remote Code Execution flaw in PHP under Apache modphp. A crafted multipart/form-data request...

php2shell-stx-research-pub

PHP2Shell STX Research I have been testing the PHP memory saf...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...

CVE-2026-54630

The Part-DB open source inventory management system is vulnerable to Remote Code Execution (RCE) in versions prior to 2.12.1 . The vulnerability exists because the AttachmentSubmitHandler::renameBlacklistedExtensions() function fails to include the .phar extension in its blocklist, allowing attac...