CVE-2026-107090

An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic...

CVE-2025-3248

Langflow CVE-2025-3248 Exploit A Python-based exploit for CVE-2025-3248, which allows remote and unauthenticated attackers to execute arbitrary code on vulnerable Langflow instances through crafted HTTP requests. Features Single URL or bulk scanning from file Automatic vulnerability detection...

CVE-2021-44852

CVE-2021-44852 An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

USN-8956-1 brotli vulnerability

It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

CVE-2023-40031

CVE-2023-40031 Analysis and Reproduction of notepad++ Heap Buffer Overflow Vulnerability CVE-2023-40031 Vulnerability Overview Notepad++ is a well-known open-source code editor that runs on Windows and supports multiple programming languages. Recently, security researchers examined Notepad++ and...

CVE-2026-0848-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-0848 Scanner Detection tool for the CVE-2026-0848 vulnerability in NLTK arbitrary code execution in StanfordSegmenter. ⚡ Installation git clone https://github.com/tu-usuario/CVE-2026-0848-Scanner.git cd CVE-2026-0848-Scanner pip install -r requirements.txt...

CVE-2024-32002

CVE-2024-32002 A simple proof-of-concept that executes Calculator macOS example only. When using git clone --recursive command, this repo will also pull https://github.com/markuta/hooky, which contains a post-checkout script. Mostly based on the commit fix t7406-submodule-update.sh file. Run Note...

CVE-2026-48800-PoC

CVE-2026-48800 — Notepad++ Arbitrary Code Execution PoC Severity: High | Affected: Notepad++ ≤ 8.9.6 | Patched: v8.9.6.1 A PoC script for CVE-2026-48800, an arbitrary code execution vulnerability in Notepad++ ≤ 8.9.6 via shortcuts.xml. For full technical details, see the official security advisor...

spring-cloud-function-rce

Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...

CVE-2023-47268

PrusaSlicer Arbitrary Code Execution Priv Esc using a .3mf file with vulnerable prusaslicer version. Make sure you can run prusaslicer using sudo. Linux 1.Download the files 2.Change IP and PORT in exploit.sh 3.Make sure to have exploit.sh on /tmp directory 4.Execute the following command sudo...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing – Technical Research & Proof-of-Concept Author: Sastra Adi Wiguna Purple Elite Teaming Research Date: January 2026 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8...

CVE-2026-31158

SQL Injection vulnerability in CRM SOFTTRADE Infotech aka softtradeindia 1.0 allows a remote attacker to execute arbitrary code via the Login Page...

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

CVE-2024-53615

CVE-2024-53615 A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file. Prerequisites: ffmpeg in PATH config.php: 'allowupload' = true exec must be...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability CVE-2022-30525 POC&EXP author:160team.west9B For use only by authorized security researchers. Comply with cybersecurity laws. Any issues arising are your own responsibility, and the author bears no liability. 01-Introduction On May 12,...

CVE-2023-38831-Winrar-Exploit-Generator-POC

CVE-2023-38831 Winrar Exploit Generator POC This is a basic proof of concept for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks within the code. Description from...

CVE-2024-23692-RCE-in-Rejetto-HFS

Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...

CVE-2023-22527

CVE-2023-22527 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE which tested and proven POC in vulnerable instance of confluence data center and servers. By this an attacker can execute arbitary code on vulnerable instance Installation: git...