350143 matches found
CVE-2025-55182-React2Shell-RCE
CVE-2025-55182 - React2Shell Unauthenticated RCE in React Server Components CVE-2025-55182, also known as React2Shell , is a critical unauthenticated Remote Code Execution RCE vulnerability affecting React Server Components packages versions 19.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability ma...
CVE-2024-4358
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 Technical Analysis A root cause analysis of the vulnerability can be found on my blog Usage python CVE-2024-4358.py --target http://192.168.253.128:83 -c...
CVE-2023-5961
This repository contains a Python script and a nuclei template designed to detect vulnerabilities in Moxa ioLogik devices, specifically focusing on the CVE-2023-5961 vulnerability. Additionally, it provides information about the vulnerability and relevant security advisories. Vulnerability...
CVE-2023-38632
CVE-2023-38632 async-sockets-cpp through 0.3.1 contains a remote buffer overflow vulnerability in static void ReceiveTCPSocket socket at tcpsocket.hpp, lines 102-110. The buffer overflow affects all corresponding TCP servers. The remote buffer overflow can be triggered by connecting to a socket a...
CVE-2018-10933
Recreate & improve scenario of CVE-2018-10933 Explaination This is educational purpose for CVE-2018-10933, which is libSSH bypass authentication! libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS messag...
CVE-2026-105828
Parse Server versions 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 are vulnerable to an information disclosure vulnerability via GraphQL errors. Even when public introspection is disabled, unauthenticated attackers possessing a public Application Id can send crafted operations to trigger ...
CVE-2026-105828 Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors
Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...
CVE-2026-105828 Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors
Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...
EUVD-2026-95015
Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...
CVE-2026-105401
Removed by vendor...
CVE-2026-105401
A heap buffer overflow vulnerability exists in ImageMagick versions prior to 7.1.2-31 within the distributed pixel cache server . A connecting client can transmit crafted data to trigger an integer-size calculation error , leading to a heap memory overwrite. This flaw can crash the server, result...
EUVD-2026-95005
ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability in the distributed pixel cache server that allows connecting clients to overwrite heap memory by sending crafted data. Attackers can connect to the distributed pixel cache server and transmit malicious data to trigger a hea...
CVE-2026-105401 ImageMagick before 7.1.2-31 Heap Buffer Overflow in Distributed Pixel Cache Server
ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability in the distributed pixel cache server that allows connecting clients to overwrite heap memory by sending crafted data. Attackers can connect to the distributed pixel cache server and transmit malicious data to trigger a hea...
CVE-2025-55182-React2Shell-Lab
CyberSec Blog CTF - React2Shell PoC This repository provides a vulnerable CTF Capture The Flag environment based on a cybersecurity blog using Next.js and React Server Components. CVE-2025-55182 : Pre-authentication Remote Code Execution RCE vulnerability in React Server Components versions 19.0....
CVE-2022-26923
CVE-2022-26923 Description This vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services AD CS server role installed. It is mainly related to the Active Directory Certificate...
CVE-2021-21110
CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit...
CVE-2025-14847-MongoBleed-Exploit
CVE-2025-14847 - MongoBleed 👨💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ EDUCATIONAL PURPOSE ONLY Lab environment and exploit script for the critical unauthenticated memory-leak vulnerability in MongoDB Server. 📋 Table of Contents Vulnerability Overview Affected Versions Installation Lab...
Log4j-_Vulnerability
The Web Is Vulnerable to CVE-2021-44228 This web application is vulnerable to CVE-2021-44228, a critical security flaw in Apache Log4j 2 known as Log4Shell. This vulnerability allows unauthenticated attackers to remotely execute malicious code by sending specific input that is logged by the syste...
CVE-2024-40898-SSL-Bypass-Detection
CVE-2024-40898 SSL Certificate Validation Bypass Scanner This repository contains a Python-based proof-of-concept PoC script to detect CVE-2024-40898, a vulnerability in Apache HTTP Server that allows attackers to bypass SSL certificate verification. Overview CVE-2024-40898 is a security issue in...