348135 matches found
CVE-2021-21972
VMware vCenter Server RCE — CVE-2021-21972 Research Lab Author: Niranjan Pokhrel Independent research project reproducing and documenting a critical, publicly disclosed VMware vCenter Server vulnerability in an isolated home lab, to understand the vulnerability class, exploitation path, and...
CVE-2025-11953-PoC
Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...
CVE-2022-26134
CVE-2022-26134 On May the 30th, 2022, an organisation named Volexity identified an un-authenticated RCE vulnerability scoring 9.8 on NIST within Atlassian's Confluence Server and Data Center editions Vulnerable Version 7.18.1 Run python -m venv venv source venv/bin/activate pip install -r...
wsvuls
WSVuls Escáner de vulnerabilidades de sitios web que detecta problemas versión de servidor desactualizada y cabeceras HTTP inseguras. ¿Qué es WSVuls? WSVuls es una herramienta de línea de comandos simple y potente para Linux, Windows y macOS. Está diseñada para desarrolladores/testers y para...
react2shell-rce-autobot
🔍 React2Shell Dork Scanner 🚨 Tentang Kerentanan React2Shell adalah kerentanan Remote Code Execution RCE kritikal yang mempengaruhi: Target| Versi Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️...
crack
crackserver XMLRPC Server & Client for hash cracking crackserver.py - server component crackclient.py - client component crack.py - same cracking functionality but performed locally instead of client / server Copyright 2011 Stephen Haywood aka AverageSecurityGuy...
CVE-2021-21972
CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...
cve-2025-55182-node
CVE-2025-55182 Next.js RCE Exploit Tool 中文文档 | 漏洞原理分析 !CAUTION ⚠️ DISCLAIMER - READ BEFORE USE This tool is intended ONLY for: Security researchers conducting vulnerability verification Authorized penetration testing with explicit permission Educational and learning purposes Unauthorized access to...
CVE-2025-55182-poc-tool
CVE-2025-55182-poc-tool A powerful exploit tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js React Server Components. This tool allows remote command execution RCE in vulnerable Next.js applications with built-in WAF bypass capabilities. Overview CVE-2025-55182 is a critic...
CVE-2025-61765_PoC
Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...
CVE-2021-26855_PoC
CVE-2021-26855PoC Mis primeros payloads de SSRF CVE-2021-26855 sobre Exchange Server 2019... Payload 1 curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...
ctxdebug
MCP servers for WinDbg, IDA Pro, and x64dbg One stdio interface · 160+ tools · Three debuggers, one client. Quick Start · Architecture · Servers · Workflows · Report an Issue Website · ctxdebug.xyz · Contact · [email protected] · Status · Public alpha For authorized reverse engineering, cras...
CVE-2026-34910-PoC
CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE & File Read Unauthenticated Command Injection RCE CVE-2026-34910 + Path Traversal Arbitrary File Read CVE-2026-34909 in UniFi OS Server. CVSS 10.0 Critical each · CISA KEV listed · actively exploited by a Mirai-derived botnet azsxd...
CVE-2026-108542
A server-side request forgery (SSRF) vulnerability exists in the 021is elvix-sdk up to version 0.10.1 . The flaw is located within an unknown functionality of the src/mcp/index.ts file in the MCP Request Handler component. By manipulating the argument path , an attacker can execute the attack rem...
CVE-2025-55182_PoC
CVE-2025-55182 - React Server Components RCE PoC Author: rl0x01 Description CVE-2025-55182 is a critical CVSS 10.0 Remote Code Execution RCE vulnerability affecting React Server Components via the Flight protocol. Vulnerable Versions Next.js| React ---|--- 14.3.0-canary.77 to 15.0.4| 19.0.0...
WindowsMDM-LPE-0Day
WindowsMDM-LPE-0Day Funciona mejor en Windows 11 CVE-2021-24084 Escalada de privilegios local de Windows. Sin parche oficial desde 2020. Por lo tanto, sigue siendo un día cero Capturas de pantalla: Youtube : https://youtu.be/lhT9m68GgL4 Versiones de Windows afectadas Windows 10 1803 Windows 10 18...
scout
Scout Scout es un fuzzer de URLs y un spider para descubrir VHOSTS, archivos y directorios no revelados en un servidor web. Una lista completa de palabras está incluida en el binario, lo que significa máxima portabilidad y mínima configuración. ¡Apunta y dispara! Usage Usage: scout command...
CVE-2024-4358
CVE-2024-4358 / CVE-2024-1800 Cadena de explotación de deserialización y omisión de autenticación en Telerik Report Server para CVE-2024-4358/CVE-2024-1800 Análisis técnico Un análisis de causa raíz de la vulnerabilidad se encuentra en mi blog poc Resumen ¿Versiones compatibles? Básicamente todas...
POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0
Database Ghost 🔥 Advanced PostgreSQL SQL Injection Exploitation Tool 🚨 DISCLAIMER FOR AUTHORIZED SECURITY TESTING ONLY Unauthorized use is illegal. Use only on systems you own or have explicit permission to test. ⚡ QUICK START Install & Run git clone...