CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

CVE-2026-5556 – Kubernetes Admission Controller Bypass via Case Sensitivity Program Code Python admission webhook + exploit !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flask import Flask, request, jsonify app = Flaskname DENIEDPODNAMES ...

POC-CVE-2024-38820

CVE-2024-38820 Proof of Concept Overview This project demonstrates CVE-2024-38820 , a vulnerability in Spring Framework's DataBinder that allows bypassing disallowedFields protection due to locale-dependent case conversion issues. Vulnerability Details CVE ID : CVE-2024-38820 Affected Component :...

F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study

This repository does not have a README...

CVE-2021-21300

CVE-2021-21300: Arbitrary Code Execution via Malicious Git Hooks 📌 Summary CVE-2021-21300 is a critical vulnerability in Git versions 2.14.2 to 2.30.1 that allows attackers to execute arbitrary code on victim machines by exploiting symbolic links and case-insensitive file systems. 🧠 Problem...

CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...

running-CVE-2024-32002-locally-for-tesing

We are adapting this for local use we follow this blog post but with some key differences https://amalmurali.me/posts/git-rce How It Works 1. A malicious repository gitrce includes a submodule with a specially crafted path. 2. The submodule path uses a case variation that exploits the...

monstra_cms-3.0.4--getshell

monstracms-3.0.4--getshell monstracms-3.0.4-upload getshell CVE-2018-17418 Code analysis: In line 150 of monstra\plugins\box\filesmanager\filesmanager.admin.php, there is a forbiddentypes variable used as a blacklist restriction. Continue to follow this variable. In the line 150 of...

CVE-2026-40453

Case-Variant Camel Header Injection Reproducer CVE-2026-40453 This project demonstrates CVE-2026-40453 — an incomplete fix for CVE-2025-27636. The 2025 fix added setLowerCasetrue to HttpHeaderFilterStrategy so that case-variant header names e.g. CAmelExecCommandExecutable are filtered alongside t...

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Practical Exploitation Lab for Apache Camel 🔍 Overview CVE-2025-27636 is a critical Remote Code Execution RCE vulnerability in Apache Camel , specifically in the camel-exec component. It stems from a subtle but dangerous issue: TheDefaultHeaderFilterStrategy performs...

nosqli-flintcms

nosqli-flintcms Blind noSQL injection case study lab based on CVE-2018-3783 privilege escalation on flintcms 1.1.9. The vulnerability was originally discovered by Benoit Côté-Jodoin. You can read original report on HackerOne. Prerequisites docker-compose Limitation : We removed sendEmail function...

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW A POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory. See cve-2024-32002-submodule-aw for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines th...

CVE-2025-29306_poc

Description Published: 2025-03-27 Updated: 2025-03-27 An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. Usage: python testpoc.py -u http://192.168.0.1/images/index.html "id" python testpoc.py -f url.txt "id"...

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

CVE-2021-21300

CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

git_rce

CVE-2024-32002: Explotando RCE en Git mediante git clone Este repositorio contiene un PoC para explotar CVE-2024-32002, una vulnerabilidad en Git que permite RCE durante una operación de git clone. Al crear repositorios con submódulos de una forma específica, un atacante puede explotar el manejo ...

CVE-2023-52709-PoC

Proof of Concept for CVE 2023-52709 "TI Bluetooth stack can fail to generate a resolvable Random Private Address RPA leading to DoS for already bonded peer devices" CVE 2023-52709 Summary When running Defensics test case SMP legacy 1001 with loop mode on DUT configured as resolvable private...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

CVE-2026-108721

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like...

CVE-2026-108721 Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like...