FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain Left: FlowiseAI login page — Right: root shell via CVE-2025-59528 · uid=0root Table of Content...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

CVE-2022-26134

CVE-2022-26134 On May the 30th, 2022, an organisation named Volexity identified an un-authenticated RCE vulnerability scoring 9.8 on NIST within Atlassian's Confluence Server and Data Center editions Vulnerable Version 7.18.1 Run python -m venv venv source venv/bin/activate pip install -r...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

GitLab-CVE-2023-7028

GitLab CVE-2023-7028 — Mock 16.6.0 Host-only CVE-2023-7028 CVSS 10.0: POST /users/password accepted useremail array — server found user by email0 but sent the same reset token to every address → attacker with [email protected] hijacks [email protected]. Affected: GitLab CE/EE 16.5.6,...

n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613

n8n Authenticated Expression Injection RCE – CVE-2025-68613 Critical Remote Code Execution CVSS 9.9 in n8n Workflow Automation Tool Proof of Concept – For educational and authorized security research use only ⚠️ Important Legal Warning This code is provided STRICTLY for educational purposes and...

cve-2025-24893

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ Unauthenticated Remote Code Execution in XWiki 🛠️ PoC implementation by @dollarboysushil 💡 Overview CVE-2025-24893 is a critical RCE vulnerability in XWiki, caused by unsafe Groovy expression handling inside the SolrSearch macro. An attacker...

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

cve-2026-85706-poc-exploit-gitlab

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

blackash-cve-2025-6389

🔥 CVE-2025-6389 — Critical WordPress Zero-Day RCE wpvultheme 🧩 What is it? CVE-2025-6389 is a Critical CVSS 9.8 vulnerability in the Sneeit Framework WordPress plugin ≤ 8.3, widely used by popular themes. It allows unauthenticated remote code execution — the most dangerous class of web...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

Joomla! Component JInventory 1.23.02 - Local File Inclusion

A directory traversal vulnerability in jinventory.php in the JInventory comjinventory component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1305...

Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass

Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x are vulnerable to authentication bypass. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the...

Advantech R-SeeNet 2.4.12 - OS Command Injection

Advantech R-SeeNet 2.4.12 is susceptible to remote OS command execution via the ping.php script functionality. An attacker, via a specially crafted HTTP request, can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering...

Essential Blocks < 4.4.3 - Local File Inclusion

Wordpress Essential Blocks plugin prior to 4.4.3 was discovered to be vulnerable to a significant Local File Inclusion vulnerability that may be exploited by any attacker, regardless of whether they have an account on the site. id: CVE-2023-6623 info: name: Essential Blocks 4.4.3 - Local File...

NodeBB XML-RPC Request xmlrpc.php - XML Injection

A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests. id: CVE-2023-43187 info: name: NodeBB XML-RPC Request xmlrpc.php - XML Injection author: 0xParth...

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

exploit-CVE-2025-55182-poc

CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. CVE-2025-55182 Emergency Fix Guide: Complete Analysis & Mitigation for Next.js/React RSC Vulnerability CVSS 10.0 This repository is fork...

CVE-2022-22947

Vulnerability Description Spring Cloud Gateway is a new project under Spring Cloud, aiming to replace Netflix Zuul. It is developed based on Spring 5.0+, Spring Boot 2.0+, and WebFlux based on the high-performance Reactor pattern reactive communication framework Netty, asynchronous non-blocking...

CVE-2018-14324-Exploit

Hacking Eclipse GlassFish - CVE-2018-14324 The description of CVE-2018-14324 does not fully explain the impact of this vulnerability. TLDR you have access to Java Management Extensions JMX via hardcoded admin:admin creds. While impact is listed as " potentially sensitive information, perform...