CVE-2024-23334

CVE-2024-23334 Exploit and PoC This repository contains a Proof of Concept PoC exploit for CVE-2024-23334, demonstrating a vulnerability in a web application that allows unauthorized access to sensitive files on the server. The PoC includes a Dockerized web server and an exploit script to test fo...

JSRat-Py

JSRat-Py Questa è la mia implementazione di JSRat.ps1 in Python, così ora puoi eseguire il server di attacco da qualsiasi sistema operativo invece di essere limitato a un sistema operativo Windows con PowerShell abilitato. Aggiunto supporto per gestire l'invocazione del client tramite i metodi...

CVE-2025-55182

CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...

106362522

106362522 Con respecto al reciente anuncio de Microsoft sobre el parche de las vulnerabilidades de Exchange Server atacadas por hackers, DEVCORE de Taiwán indicó que ya había descubierto las vulnerabilidades de seguridad el 5 de enero y notificó a Microsoft sobre estas vulnerabilidades de día cer...

react2shell-interactive

React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

MSSQL-Analysis-Coerce

MSSQL Analysis Services - Coerced Authentication A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine. This proof of concept is co-authored by : Podalirius: Worty: Proof of concept In order to trigger the authentification as the local machine account, we need to...

CVE-2014-6271

Probador de CVE-2014-6271 Bash Shellshock y Aftershock para Ansible 1. Instalar Ansible http://docs.ansible.com/introinstallation.html 2. Agregar servidores al archivo de inventario ejemplo: username@ip 3. Copiar tu clave pública a .ssh/authorizedkeys de los servidores remotos 4. ejecutar prueba ...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Authentication bypass / incorrect access control in PerfexCRM Note: Steps above are the original discovery steps reported by Ajansha Shankar and Ahamed Yaseen. References OWASP Authentication Cheat Sheet — gui...

CVE-2025-32433

Vulnerabilidad de ejecución remota de código en Erlang/OTP SSH: la causa raíz radica en un defecto en el mecanismo de procesamiento de mensajes del protocolo SSH, que permite a un atacante enviar mensajes de protocolo de conexión antes de que se complete la autenticación. Cabe destacar que esta...

FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...

CVE-2024-48360

CVE-2024-48360 | Qualitor = v8.24 SSRF sin autenticación CVE-2024-48360 | Qualitor = v8.24 SSRF sin autenticación Descripción Qualitor es una plataforma para la gestión de procesos empresariales, y este sistema está presente en varias empresas de Brasil que pueden ser identificadas simplemente...

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Exploit RCE para Wing FTP Server Este repositorio proporciona un exploit de prueba de concepto para CVE-2025-47812 , una vulnerabilidad de ejecución remota de comandos RCE en Wing FTP Server. Un atacante puede inyectar y ejecutar comandos arbitrarios del sistema basados en Lua...

wildfly__wildfly_CVE-2018-1047_11-0-0-Final

WildFly Application Server http://wildfly.org Inicio rápido Huella reducida Diseño modular Configuración y gestión unificadas Y, por supuesto, ¡Java EE7! Compilación Requisitos previos: JDK 8 o superior: compruebe java -version Maven 3.3.1 o superior: compruebe mvn -v En sistemas nix, asegúrese d...

CVE-2025-46295-fix-fms

FileMaker Apache Commons JAR Replacer Overview The FileMaker Apache Commons JAR Replacer is an automation solution that addresses CVE-2025-46295 by replacing vulnerable Apache Commons JAR files in FileMaker Server installations. Instead of upgrading the entire FileMaker Server, this solution...

CVE-2021-21985

CVE202121985 Description This script check the CVE-2021-21985 vulnerability and patch on vCenter Server. Requirements Python3 Python3 Standard Library Installation git clone https://github.com/mauricelambert/CVE202121985.git ./ Example To check IP 10.0.0.2, 10.0.0.3 and hostname vCenter3: python3...

CVE-2021-23017

CVE-2021-23017 CVE-2021-23017-PoC python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where...

CVE-2025-31486-Simulation

Vite Path Traversal Lab CVE-2025-31486 A hands-on, containerized lab environment to simulate and exploit the Path Traversal vulnerability in Vite's development server, identified as CVE-2025-31486. 📖 About The Vulnerability This lab demonstrates a significant Path Traversal vulnerability found in...

CVE-2026-108554

PDFMathTranslate pdf2zh through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translatefile handler passes user URLs to downloadwithlimit without scheme or address validation, letti...

EUVD-2026-96348

PDFMathTranslate pdf2zh through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translatefile handler passes user URLs to downloadwithlimit without scheme or address validation, letti...