43588 matches found
CVE-2026-8181
EN: Controlled PoC and brief technical notes for authorized security testing of the authentication bypass in Burst Statistics. TR:...
CVE-2026-8452-check
Citrix NetScaler SAML PrefixList Heap Overflow β Patch-State Detection Script A safe, non-destructive patch-state check for CVE-2026-8452 , the pre-authentication heap overflow in the Citrix NetScaler ADC / NetScaler Gateway SAML signature canonicalizer CTX696604, CVSS 8.8. An oversized...
CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE
CVE-2025-32433 - Erlang/OTP SSH RCE PoC Overview PoC showing unauthenticated remote code execution in Erlang/OTP SSH server. By exploiting a flaw in SSH protocol message handling, an attacker can execute arbitrary commands on the target without valid credentials. CVE: CVE-2025-32433 CVSS Score:...
CVE-2025-55184_Testing
CVE-2025-55184Testing Python script for testing CVE-2025-55184 CVE-2025-55184 β React Server Components DoS Scanner A safe, security validation script designed to detect CVE-2025-55184 , a denial-of-service DoS vulnerability affecting React Server Components RSC. This tool is intended strictly fo...
CVE-2025-32433
π¨ CVE-2025-32433: Unauthenticated RCE in Erlang/OTP SSH Server Critical Pre-Authentication Remote Code Execution Vulnerability A severe flaw in the Erlang/OTP built-in SSH daemon allows unauthenticated remote attackers to achieve full remote code execution RCE by sending crafted SSH connection...
CVE-2021-22205
CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE Summary of the CVE GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which...
writehat
WriteHat es una herramienta de informes que elimina Microsoft Word y muchas horas de sufrimiento del proceso de generaciΓ³n de informes. Markdown -- HTML -- PDF. Creada por probadores de penetraciΓ³n, para probadores de penetraciΓ³n, pero puede usarse para generar cualquier tipo de informe. Escrito...
DSpace__DSpace_CVE-2022-31194_5-10
DSpace version information can be viewed online at https://wiki.duraspace.org/display/DSDOC/ Documentation for the most recent stable releases may be downloaded or viewed online at http://www.dspace.org/latest-release/ https://wiki.duraspace.org/display/DSDOC/...
CVE-2020-5902-Vuln-Checker
CVE-2020-5902 Vulnerability Checker N|Solid While looking at the vulnerabilty with fellow researchers we came to the idea that most of the current ways in which to test for the vulnerability can be classed as a form of compromise of the system. We wanted to develop a way in which to test the...
paracosme
Paracosme - CVE-2022-33318 - Remote Code Execution in ICONICS Genesis64 Paracosme is a memory corruption exploit I wrote to target the Genesis64 suite v10.97.1 made by ICONICS to achieve remote code execution. The exploit was demonstrated during the Pwn2Own 2022 Miami contest that took place at t...
cve-2025-62726-poc
CVE-2025-62726 POC - n8n Git Node RCE Educational Purpose This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025 Vulnerability Overview CVE ID: CVE-2025-62726...
log4shell-mitigation
Details and Mitigation Strategy for log4j2 RCE Vulnerability Visit this Youtube video for additional details. https://youtu.be/jqWdwTeGRK0 This is a quick post on the mitigation for CVE-2021-44228 Security Vulnerability aka Log4Shell and LogJam found in log4j2 Disclaimer All the information and...
pwndoc
PwnDoc PwnDoc es una aplicaciΓ³n de informes de pruebas de penetraciΓ³n que hace simple y fΓ‘cil escribir tus hallazgos y generar un informe Docx personalizable. El objetivo principal es tener mΓ‘s tiempo para Pwn y menos tiempo para Doc al mutualizar datos como vulnerabilidades entre usuarios...
FlowiseAI-Critical-KillChain
FlowiseAI β Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain Left: FlowiseAI login page β Right: root shell via CVE-2025-59528 Β· uid=0root Table of Content...
Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS
CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...
CVE-2022-26134
CVE-2022-26134 On May the 30th, 2022, an organisation named Volexity identified an un-authenticated RCE vulnerability scoring 9.8 on NIST within Atlassian's Confluence Server and Data Center editions Vulnerable Version 7.18.1 Run python -m venv venv source venv/bin/activate pip install -r...
CVE-2025-68613-n8n-rce-analysis
Matrix GIF...
GitLab-CVE-2023-7028
GitLab CVE-2023-7028 β Mock 16.6.0 Host-only CVE-2023-7028 CVSS 10.0: POST /users/password accepted useremail array β server found user by email0 but sent the same reset token to every address β attacker with [email protected] hijacks [email protected]. Affected: GitLab CE/EE 16.5.6,...
n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613
n8n Authenticated Expression Injection RCE β CVE-2025-68613 Critical Remote Code Execution CVSS 9.9 in n8n Workflow Automation Tool Proof of Concept β For educational and authorized security research use only β οΈ Important Legal Warning This code is provided STRICTLY for educational purposes and...
cve-2025-24893
CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC β οΈ Unauthenticated Remote Code Execution in XWiki π οΈ PoC implementation by @dollarboysushil π‘ Overview CVE-2025-24893 is a critical RCE vulnerability in XWiki, caused by unsafe Groovy expression handling inside the SolrSearch macro. An attacker...