CVE-2018-1335

CVE-2018-1335 Vulnerabilidad RCE remote code execution a servidores apache Tika-server con versiones inferiores a 1.18 commands: sudo bash install.sh python2 exploit.py...

CVE-2020-9470

¿Qué es esto? Wing FTP Server 6.2.5 - Escalada de Privilegios Introducción Una debilidad en el manejo de sesiones HTTP dentro de Wing FTP Server permite a cualquier usuario local escalar privilegios a root en Linux, MacOS y Solaris. La explotación depende de una sesión administrativa ya...

cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container docker build -t cve-2025-55182:lab . docker run -...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

-CVE-2022-26134

Ejecución remota de código sin autenticación previa en Confluence mediante inyección OGNL CVE-2022-26134 Ejecución remota de código sin autenticación previa en Confluence mediante inyección OGNL CVE-2022-26134 El 02 de junio de 2022, Atlassian publicó un aviso de seguridad para sus aplicaciones...

CVE-2025-55182

Aplicación React Vulnerable CVE-2025-55182 Esta aplicación es una Prueba de Concepto PoC para CVE-2025-55182 , una vulnerabilidad crítica de Ejecución Remota de Código RCE en React Server Components. Detalles de la Vulnerabilidad CVE ID : CVE-2025-55182 Gravedad : Crítica CVSS 10.0 Componentes...

Block-Spring4Shell

Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...

CloudPanel-CVE-2023-33747

CloudPanel-CVE-2023-33747...

CVE-2021-41773

Apache 2.4.49 Path Traversal + Remote Code Execution CVE-2021-41773 Vulnerability Description This vulnerability affects versions of Apache HTTP Server 2.4.49. A path validation error allows remote attackers to perform Path Traversal using sequences like .%2e/ to access paths outside the configur...

gha-lab-51c6b6d0a0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of parse-community/parse-server at commit...

CVE-2026-108582

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

log4j2_CVE-2021-44228

Prueba del entorno log4j2: cualquier problema es responsabilidad personal Mi entorno de prueba es Java 17; si necesitas cambiarlo, solo modifícalo y vuelve a importar el proyecto. Después de iniciar el entorno, la dirección es: http://127.0.0.1:8006/test...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387-Vulnerability-Checker LAB Este código Rust está diseñado para comprobar servidores SSH en busca de la vulnerabilidad CVE-2024-6387 Argumentos de línea de comandos: ./main -f servers.txt -p 22,2222 -t 5...

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

EUVD-2026-96366

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

EUVD-2026-96365

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

CVE-2026-108582

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

CVE-2026-108582

The software GenOffice (versions through 0.11.505) is vulnerable to an incorrect permissions flaw in its HTTP MCP server file store . This vulnerability allows local unprivileged users to read uploaded and generated documents by listing the world-readable genoffice-mcp-http directory located in t...

CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...