116418 matches found
CVE-2026-82804 Apache DolphinScheduler: Command Injection in the Alert Script Plugin
The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...
EUVD-2026-88812
The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...
CVE-2026-82804
The Apache DolphinScheduler (versions before 3.4.3 ) is vulnerable to command injection in the Alert Script plugin . The root cause is the incorporation of the scriptPath parameter into a /bin/sh -c command without sufficient neutralization of shell metacharacters. An authenticated user can explo...
CVE-2026-5562-Exploit
Exploit CVE-2026-5562 Advertencia Este repositorio contiene un script de investigación de prueba de concepto para validar la exposición en un entorno controlado. Es solo con fines de investigación y educación, no debe utilizarse contra sistemas de producción en los que no tenga autorización...
CVE-2020-14882-WebLogic-Analysis
Investigación de vulnerabilidades: Explotación de la cadena CVE-2020-14882 y CVE-2020-14883 en Oracle WebLogic Server El repositorio contiene un informe técnico Write-up y una prueba de concepto PoC para demostrar la cadena de vulnerabilidades de omisión de autenticación Authentication Bypass y...
opmonster
OpMonster CVE-2020-8636 — authenticated remote code execution exploit for Opmon About • Install • Usage • License About OpMonster is a proof-of-concept exploit for CVE-2020-8636 , a remote code execution vulnerability in the Opmon monitoring platform. It abuses the nettools.php endpoint, which le...
CVE-2026-39636-vulnerability-exp
1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly CVE-2026-39363...
Exploit-CVE-2024-34070
Exploit for CVE-2024-34070 Credit to froxlor for the vuln discover. Check here for more. Train yourself on Hack The Box. Exploitation...
CVE-2026-77806
exp.py link instruction scan.py link...
CVE-2026-15410
cve-id ⚡ Uso Sencillo Utilice este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizadas Ejemplo de configuración: git clone cd Project use python follow below...
MAL-2026-17246 Malicious code in exptred (npm)
The package exptred impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17244 Malicious code in exprrdd (npm)
The package exprrdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in exprrdd (npm)
The package exprrdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
redis-checker
redis-checker Detecta servidores Redis expuestos usage: redis-checker.py -h -u URL -f FILE -p PROXY -P PORT -s SSL options: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging -P PORT, --port PORT...
CVE-2025-70830
CVE-2025-70830: Datart Server-Side Template Injection SSTI Vulnerability Overview Overview CVE ID : CVE-2025-70830 Affected Product : Datart Affected Version : v1.0.0-rc.3 Vulnerability Type : Server-Side Template Injection SSTI - Server-Side Template Injection Risk Level : Remote Code Execution...
Sub-folderFetcher
Sub-folder Fetcher 🐣 A script to download specific Vulhub repository folder kibana/CVE-2018-17246 from GitHub. 🚀 Requirements curl unzip 🛠️ Usage chmod +x subfetcher.sh ./subfetcher.sh...
CVE-2020-2551
CVE-2020-2551 Los scripts de configuración de este proyecto han sido probados en la versión 10.3.6; la versión 12 no ha sido probada. Entorno kali+weblogic10.3.6+jdk6u25 Asegúrese de que la máquina que implementa weblogic tenga al menos 1.5G de memoria, porque el parámetro -x1024m está especifica...
Dompdf-Exploit-RCE
Dompdf-Exploit-RCE Un script de explotación para CVE-2022-28368 diseñado para hacer la explotación menos molesta, hecho para una máquina de HTB Hecho para hacer el exploit menos tedioso y molesto...
CVE-2026-53805
cve-id ⚡ Uso Simple Utilice este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Ejemplo de configuración: git clone cd Project use python follow below Create a...