sk-cve-2026-26030-lab

CVE-2026-26030 — Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...

CNTA-2019-0014xCVE-2019-2725

CNTA-2019-0014-CVE-2019-2725 Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited. Usage:python3 weblogicrce.py url command is echo? win or linux For detailed analysis, please visit: https://icematcha.win/?p=1174...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel Exploit Summary In this project you will find a full implementation of the second "bpf" kernel exploit for the PlayStation 4 on 5.05. It will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level modifications to the system. This exploit also contains...

Info-Sys-Security-CVE-2025-55182

CVE-2025-55182 Security Lab "React2Shell" This repository contains a local academic lab for analyzing CVE-2025-55182 in a controlled React Server Components environment. The lab simulates the vulnerability, its exploitation, and the applied patch. 📁 Repository Layout Core Applications...

CVE-2023-40031

CVE-2023-40031 Analysis and Reproduction of notepad++ Heap Buffer Overflow Vulnerability CVE-2023-40031 Vulnerability Overview Notepad++ is a well-known open-source code editor that runs on Windows and supports multiple programming languages. Recently, security researchers examined Notepad++ and...

log4shell-poc

CVE-2021-44228 Log4Shell POC Overview Proof of Concept for Remote Code Execution via JNDI Injection vulnerability in Apache Log4j 2.14.1. Web Hacking Course - Week 11 Assignment. Environment Role| Software| Version ---|---|--- Victim Server| Spring Boot + Log4j| 2.6.1 + 2.14.1 Victim JDK| OpenJDK...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2026-5203

CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple ≤ 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator to upload arbitrary files e.g. PHP web shells...

CVE-2022-39197

CVE-2022-39197 RCE POC Usage Prepare Payload 1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java 2. Build using jar mvn clean compile assembly:single 3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder 4. Edit serve\evil.svg replace attacker 5...

CVE-2025-55182POC

CVE-2025-55182 React Server Components RCE POC This project is a CVE-2025-55182 - React Server Components RSC RCE Proof of Concept , demonstrating remote code execution triggered under specific conditions via vm.runInThisContext and malicious ACTION payload. Python side: Automates sending malicio...

CVE-2026-21858

CVE-2026-21858 RCE PoC environment for n8n 1.120.4 with a Form Trigger workflow and an exploit script. Requirements Docker Docker Desktop on Windows Python 3.x attack side Files Dockerfile — build the n8n vulnerable environment run.bat — run the container Windows workflow.txt — n8n workflow...

CVE-2021-31805-POC

CVE-2021-31805-POC Vulnerability Information Apache Struts is a free, open-source MVC framework for creating elegant, modern Java web applications. It favors convention over configuration, can be extended using a plugin architecture, and ships with plugins that support REST, AJAX, and JSON...

CVE-2026-4885

CVE-2026-4885 Piotnet Addons for Elementor Pro Note: The exploit can only be triggered if a file field is added to the Piotnet form. INFO : CVE-2026-4885 CVSS Score : 9.8 Critical CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Versions : = 7.1.70 Patched : No patch available...

CVE-2025-56514

CVE-2025-56514: Cross Site Scripting XSS Vulnerability in Fiora Chat Application Overview A Cross Site Scripting XSS vulnerability, identified as CVE-2025-56514 , affects the Fiora chat application version 1.0.0. This vulnerability allows an authenticated user to execute arbitrary JavaScript in t...

VertXploit

VertXploit Exploiting HID VertX and EDGE access control systems Summary VertXploit is a tool that can be used to exploit HID VertX and EDGE access control systems. A vulnerability exists within the discoveryd service, which fails to sanitize user data before executing system calls. This allows fo...

CVE-2025-55182-React2Shell-RCE-POC

CVE-2025-55182 - React2Shell RCE This repository documents research into CVE-2025-55182, also known as React2Shell, a critical unsafe deserialization vulnerability in React Server Components RSC and frameworks that embed the RSC Flight protocol, especially Next.js App Router. The focus here is on...

Metabase-Pre-Auth-RCE-POC

CVE-2023-38646 — Metabase Remote Code Execution RCE Proof-of-Concept Overview This repository documents a Proof-of-Concept PoC security research project analysing CVE-2023-38646 , a critical pre-authentication Remote Code Execution RCE vulnerability affecting vulnerable versions of Metabase. The...

CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd Critical Stack-Based Buffer Overflow in OpenWrt odhcpd A remote unauthenticated stack-based buffer overflow allowing potentialRemote Code Execution RCE with root privileges. 📖 Overview Property| Value ---|--- CVE ID| CVE-2026-53921 Severity| 🔴 Critical CVSS v3.1| 9.8 CWE...

CVE-2024-53677-POC

CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...