Drupal - Remote Code Execution

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. id: CVE-2018-7600 info: name: Drupal - Remote Code Execution author:...

CVE-2026-67100

creationtimestamp| type| source ---|---|--- 2026-09-18 08:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvrqumzmep2f 2026-09-18 09:26:41+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mvrtzrl5mv2l 2026-09-18 10:07:06+00:00| seen|...

CVE-2026-67101

creationtimestamp| type| source ---|---|--- 2026-09-18 08:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvrqukkm2x2j 2026-09-18 10:07:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvrwcbzrnf24 2026-09-18 12:00:29+00:00| seen|...

CVE-2026-71211-exploit

CVE-2026-71211-exploit CVE-2026-71211 exploit...

ROOT-APP-MAVEN-CVE-2026-41695 CVE-2026-41695 in org.springframework.data:spring-data-commons - Patched by Root

Root has patched CVE-2026-41695 in the org.springframework.data:spring-data-commons package for Root:Maven. Multiple fixed versions available...

cve-2015-1328

This repository does not have a README...

CVE-2019-17671

＃CVE-2019-17671 ＃url + /？static = 1＆order = asc...

CVE-2019-7238_Nexus_RCE_Tool

Maimentong CVE-2019-7238 Nexus RCE Vulnerability Detection Tool Tool Introduction I wrote this small tool in Java in my spare time. It supports one-click detection of the CVE-2019-7238 vulnerability and execution of system commands, with both GUI and command-line usage. This tool is restricted to...

cve-2025-29927-lab

CVE-2025-29927 Lab Minimal reproduction lab for CVE-2025-29927 — Next.js middleware authorization bypass CVSS 9.1. Companion to: N-Day Analysis writeup on Medium What this is A Next.js 15.2.2 app vulnerable with a cookie-gated /dashboard route. The middleware auth check can be bypassed by sending...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...

CVE-2026-8838-Mitigation-and-Detection

CVE-2026-8838 Proof of Concept and Mitigation This project demonstrates the exploitation and mitigation of CVE-2026-8838 , a Remote Code Execution RCE vulnerability affecting the amazon-redshift-python-driver prior to 2.1.14. The project consists of: Client Application Mock Redshift Server Attack...

CVE-2026-18442

creationtimestamp| type| source ---|---|--- 2026-09-18 07:48:58+00:00| seen| https://bsky.app/profile/suriq.io/post/3mvrol22qhr2n 2026-09-19 10:05:20+00:00| seen| https://bsky.app/profile/cryptocat.me/post/3mvugnqpxd22x...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report Этот репозиторий содержит профессиональный отчет о программе bug bounty, демонстрирующий успешную эксплуатацию слепой SSRF-уязвимости, которая достигла внутренней CGI-конечной точки, уязвимой для Shellshock CVE-2014-627...

statecraftcyber

Statecraft Cyber Intelligence Threat intelligence platform in Portuguese built from scratch as a personal Blue Team project. It aggregates data from global open sources and transforms it into technical briefings, classified news, enriched CVEs, and structured IOCs — all in PT-BR, continuously...

LeakedWallpaper

Leaked Wallpaper This is a privilege escalation tool fixed with CVE-2024-38100 in KB5040434 that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user. Usage root@kitploit: .\LeakedWallpaper.exe \\c$\1.jpg -downgrade Example...

Apache-OFBiz-Directory-Traversal-exploit

Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...

Cve-2020-11023

Cve-2020-11023...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

wp2shell_scanner

wp2shellscanner Non-intrusive detection scanner for recent WordPress core vulnerabilities — including the wp2shell pre-authentication RCE chain. wp2shellscanner.py fingerprints a WordPress site's core version and reads its publicly advertised REST API surface, then classifies each tracked core CV...