Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...

CVE-2025-5777-TrendMicro-ApexCentral-RCE

🚨 CVE-2025-5777 – Trend Micro Apex Central Auth Bypass + RCE 🔎 Overview CVE-2025-5777 is a critical authentication bypass and remote code execution RCE vulnerability discovered in Trend Micro Apex Central. It allows unauthenticated attackers to execute arbitrary commands on the system by abusing ...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulnerability through the CLI can lead to RCE Products and Versions affected: Product| Affected Versions ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS: CRITICAL Actively Exploited: YES Patch: YES Mitigation: YES Help root@kitploit: usage:...

CVE-2024-4040-CrushFTP-File-Read-vulnerability

CVE-2024-4040: CrushFTP File Read Vulnerability Overview On April 19, 2024, a new zero-day vulnerability affecting CrushFTP versions below 10.7.1 and 11.1.0, as well as legacy 9.x versions, was disclosed to a private mailing list by the managed file transfer vendor CrushFTP. Initially, no CVE was...

CtrlPanel <= 1.1.1 - Remote Code Execution

CtrlPanel versions = 1.1.1 are vulnerable to unauthenticated Remote Code Execution RCE via the web installer endpoint public/installer/index.php. The installer loaded and executed form handler files before checking for the install.lock gate, allowing attackers to reach installer forms on...

rxerium-templates

Una colección seleccionada de más de 144 plantillas de Nuclei centradas en vulnerabilidades de día cero y explotadas activamente en la naturaleza , junto con algunas plantillas misceláneas. Las plantillas utilizan técnicas de detección pasiva coincidencia de versión/fecha y están organizadas por...

react2shell-scanner

🚨 React2Shell Scanner CVSS 10.0 RCE in React Server Components. Is your React 19 app vulnerable? Fast, accurate scanner for CVE-2025-55182 React2Shell - a critical remote code execution vulnerability exploited in the wild. Zero false positives with intelligent Server Components detection. 🚨 About...

CVE-2024-27198

CVE-2024-27198 CVE-2024-27198 - Authentication Bypass Using an Alternate Path vulnerability in JetBrains TeamCity Server Please refer to Rapid7's blogpost for more information: CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities Products and Versio...

CVE-2023-22515-Scan

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 Vulnerability Analysis A cybersecurity project exploring a real-world vulnerability,its potential impact,and how security teams can detect,fix,and verify the issue. Project Overview This project is part of my cybersecurity learning journey. I selected...

CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool Overview This tool is a non-destructive exposure survey utility for assessing whether a target PAN-OS service may expose network-accessible surfaces related to CVE-2026-0300. The tool is intended for authorized defensive security validatio...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20131 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20131, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability Repository Title Suggestion: CVE-2026-21510-Windows-Shell-Bypass-Analysis This README provides a comprehensive overview of CVE-2026-21510 , a high-severity, actively exploited zero-day vulnerability patched by Microsoft in the...

threat-intel-brief-cve-2026-42208-litellm

Threat Intelligence Brief - CVE-2026-42208: BerriAI LiteLLM SQL Injection CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc CVSS Score: 9.3 Critical Affected Software: BerriAI LiteLLM versions = 1.81.16, 1.83.7 Fixed Version: 1.83.7-stable released April 19, 2026 CISA KEV Added: May 08, 2026 Sources:...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Oracle E-Business Suite Pre-Auth RCE Exploit A critical pre-authentication Remote Code Execution RCE flaw in Oracle E-Business Suite versions 12.2.3–12.2.14 allows attackers to gain full control over vulnerable servers via malicious HTTP requests — now actively exploited in the...