322930 matches found
docling-core-CVE-2026-24009
CVE-2026-24009 β docling-core Unsafe YAML Deserialization PoC + Notes This repo contains a proof-of-concept PoC and a simple scanner demonstrating CVE-2026-24009 , where docling-core can enable code execution when loading attacker-controlled YAML under specific dependency conditions. TL;DR Impact...
cve-2026-31900-lab
CVE-2026-31900 β Vulnerable Lab psf/black GitHub Action RCE via Insecure Regex Validation Field| Detail ---|--- CVE| CVE-2026-31900 CVSS| 8.7 High Advisory| GHSA-v53h-f6m7-xcgm Affected| psf/black GitHub Action v26.3.0 Type| RCE via Supply Chain pullrequest trigger Vulnerability The usepyproject:...
CVE-2023-4220
CVE-2023-4220 PoC Chamilo LMS Unauthenticated Big Upload File RCE This repository contains a Proof of Concept PoC for CVE-2023-4220 , a Remote Code Execution RCE vulnerability affecting Chamilo LMS. This vulnerability allows unauthenticated attackers to exploit a large file upload feature, leadin...
CVE-2026-32475-PoC
CVE-2026-32475 β Elementor Pro Unauthenticated Arbitrary File Upload β RCE Proof-of-concept for CVE-2026-32475 CVSS 9.0: an unauthenticated arbitrary file upload vulnerability in the Elementor Pro WordPress plugin β€ 4.2.1 that leads to remote code execution. | ---|--- CVE| CVE-2026-32475 CVSS| 9....
CVE-2016-10033
CVE-2016-10033 β PHPMailer Remote Code Execution π Description This repository contains a proof-of-concept PoC exploit for CVE-2016-10033 , a vulnerability in PHPMailer versions prior to 5.2.18. The issue occurs when the $additionalparameters argument of PHP's built-in mail function is improperly...
Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit
Exploit for CVE-2021-41773 and CVE-2021-42013 Path traversal attack and RCE in Apache/2.4.49-2.4.50 Features - Take a list of urls - Works for both CGI and non-CGI - Works for Apache/2.4.49 - 2.4.50 Usage $ git clone https://github.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit $...
CVE-2023-22527_Confluence_RCE
CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...
POC-CVE-2026-23520
CVE-2026-23520 β Arcane Lifecycle Label RCE OS Command Injection in Arcane Docker Management 1.13.0 Overview Arcane is a modern, web-based Docker management platform. Versions prior to 1.13.0 are vulnerable to an authenticated Remote Code Execution RCE via OS command injection in the updater...
CVE-2026-22241
CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...
CVE-2026-27966--RCE-in-Langflow
π CVE-2026-27966 - Langflow RCE Exploit Tool All-in-One Exploitation Tool untuk CVE-2026-27966 π Deskripsi Tool ini adalah all-in-one exploit untuk CVE-2026-27966, sebuah kerentanan Remote Code Execution RCE pada Langflow yang memungkinkan attacker mengeksekusi perintah sistem secara remote. CVSS...
CVE-2026-29053
This is a rework of the Repo by rootxran for this same CVE - https://github.com/rootxran/CVE-2026-29053 During testing against specific Ghost CMS environments, the original theme payload triggered a Fatal Handlebars Error. The CMS failed to activate the malicious theme because it referenced a...
CVE-2026-3854
CVE-2026-3854: RCE on GitHub via X-Stat header injection Practical summary of how the vulnerability discovered by Wiz Research in GitHub.com and GitHub Enterprise Server's internal git push pipeline works. Disclaimer This material is for educational purposes and offensive security research. The...
CVE-2026-22812
CVE-2026-22812 Overview A Python exploitation tool for OpenCode Remote Code Execution RCE vulnerability affecting versions v1.0.216. This tool provides multiple attack vectors including command execution, file read/write, file upload/download, and interactive shell. Disclaimer β οΈ FOR AUTHORIZED...
CVE-2026-0770
π CVE-2026-0770 β Langflow RCE execglobal PoC Remote Code Execution vulnerability in Langflow π Affected Software This vulnerability affects: Langflow π§ Vulnerability Overview CVE-2026-0770 is a Remote Code Execution RCE vulnerability in the: /api/v1/validate/code endpoint. When AUTOLOGIN=true an...
CVE-2026-23744-script
A script for CVE-2026-23744, which exploits MCPJam Inspector versions = 1.4.2. Based off the curl command used here: https://github.com/advisories/GHSA-232v-j27c-5pp6 Make sure your /etc/hosts file is correct and points to the domain/vhost of the target...
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC
π» CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC 𧩠Overview This project reproduces the MonikerLink behavior CVE-2024-21413 in a fully isolated TryHackMe environment to show how certain hyperlink formats can cause Outlook to process a link in a way that leaks...
CVE-2025-59287
CVE-2025-59287 WSUS Vulnerability Reproduction CVE-2025-59287 β Injecting WolfShell Wolverine Forward Memory Shell Overview CVE-2025-59287 exploits a logic flaw in WSUS-related components to inject a WolfShell memory shell into the target server. When an administrator opens the WSUS console...
CVE-2021-22204
CVE-2021-22204 A complete PoC for CVE-2021-22204 exiftool RCE...
CVE-2026-15748
CVE-2026-15748 β Forminator Forms Unauthenticated Arbitrary File Upload β RCE CVSS 9.8 Critical Β· Affected: Forminator = 1.56.1 Β· Patched: 1.56.2 Researcher: daroo Wordfence Bug Bounty, $2,048 Β· 600k active installs Writeup:...