CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387-Vulnerability-Checker LAB Este código Rust está diseñado para comprobar servidores SSH en busca de la vulnerabilidad CVE-2024-6387 Argumentos de línea de comandos: ./main -f servers.txt -p 22,2222 -t 5...

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

EUVD-2026-96366

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

EUVD-2026-96365

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

CVE-2026-108582

The software GenOffice (versions through 0.11.505) is vulnerable to an incorrect permissions flaw in its HTTP MCP server file store . This vulnerability allows local unprivileged users to read uploaded and generated documents by listing the world-readable genoffice-mcp-http directory located in t...

CVE-2026-108582

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

CVE-2022-26923-rayng

Explotando CVE-2022-26923: Escalada de Privilegios mediante Autoridad de Certificación Resumen CVE-2022-26923 es una vulnerabilidad en los Servicios de Certificados de Active Directory AD CS que permite a un atacante escalar privilegios abusando de la autenticación basada en certificados. Esta gu...

CVE-2024-23334

CVE-2024-23334 Exploit y PoC Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2024-23334, que demuestra una vulnerabilidad en una aplicación web que permite el acceso no autorizado a archivos sensibles en el servidor. El PoC incluye un servidor web Dockerizado y un script d...

JSRat-Py

JSRat-Py Questa è la mia implementazione di JSRat.ps1 in Python, così ora puoi eseguire il server di attacco da qualsiasi sistema operativo invece di essere limitato a un sistema operativo Windows con PowerShell abilitato. Aggiunto supporto per gestire l'invocazione del client tramite i metodi...

CVE-2025-55182

CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...

106362522

106362522 Con respecto al reciente anuncio de Microsoft sobre el parche de las vulnerabilidades de Exchange Server atacadas por hackers, DEVCORE de Taiwán indicó que ya había descubierto las vulnerabilidades de seguridad el 5 de enero y notificó a Microsoft sobre estas vulnerabilidades de día cer...

react2shell-interactive

React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

MSSQL-Analysis-Coerce

MSSQL Analysis Services - Coerced Authentication A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine. This proof of concept is co-authored by : Podalirius: Worty: Proof of concept In order to trigger the authentification as the local machine account, we need to...

CVE-2014-6271

Probador de CVE-2014-6271 Bash Shellshock y Aftershock para Ansible 1. Instalar Ansible http://docs.ansible.com/introinstallation.html 2. Agregar servidores al archivo de inventario ejemplo: username@ip 3. Copiar tu clave pública a .ssh/authorizedkeys de los servidores remotos 4. ejecutar prueba ...

Goahead-CVE-2017-17562

Goahead-CVE-2017-17562...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Authentication bypass / incorrect access control in PerfexCRM Note: Steps above are the original discovery steps reported by Ajansha Shankar and Ahamed Yaseen. References OWASP Authentication Cheat Sheet — gui...

CVE-2025-32433

Vulnerabilidad de ejecución remota de código en Erlang/OTP SSH: la causa raíz radica en un defecto en el mecanismo de procesamiento de mensajes del protocolo SSH, que permite a un atacante enviar mensajes de protocolo de conexión antes de que se complete la autenticación. Cabe destacar que esta...

FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...