poc-cve-2025-55182

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...

CVE-2020-11978

CVE-2020-11978: Remote code execution in Apache Airflow's Example DAGs Information Description: This vulnerability allows RCE when Airflow's example DAGs are loaded, potentially unauthenticated with CVE-2020-13927 CVE Credit : xuxiang of DtDream security Versions Affected: On CVE-2020-13927 If...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution RCE vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation...

Log4jCenter

Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote code execution and more. Blog post detailing exploitation linked below: How to exploit Log4j vulnerabilities in VMWare vCenter Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository...

CVE-2021-3129

CVE-2021-3129 Laravel Ignition RCE Exploit This is a Python exploit script for CVE-2021-3129, a remote code execution vulnerability in Laravel when the Ignition package is installed. This vulnerability allows an attacker to execute arbitrary system commands via PHAR deserialization. Features...

CVE-2024-27956-RCE

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...

EulerOS Virtualization 2.15.0 : samba (EulerOS-SA-2026-4853)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto- enrollment is enabled, Samba m...

PT-2026-139006

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description Insufficient input validation in the processing of uploaded custom module content allows a remote authenticated attacker to...

EulerOS Virtualization 2.15.0 : edk2 (EulerOS-SA-2026-4626)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack...

Linux Distros Unpatched Vulnerability : CVE-2026-122329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law o...

Linux Distros Unpatched Vulnerability : CVE-2026-122328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files...

EulerOS Virtualization 2.15.1 : samba (EulerOS-SA-2026-4794)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto- enrollment is enabled, Samba m...

EulerOS Virtualization 2.15.1 : perl-IO-Compress (EulerOS-SA-2026-4781)

According to the versions of the perl-IO-Compress package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled outp...

Linux Distros Unpatched Vulnerability : CVE-2026-73860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the start of the first executable virtual memory area a...

PT-2026-139005

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A path traversal issue allows a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative...

PT-2026-139092

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A path traversal flaw allows a remote attacker to execute arbitrary code without requiring authentication. Path traversal is a technique used to access files and directories that a...

EulerOS Virtualization 2.15.1 : edk2 (EulerOS-SA-2026-4584)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack...

PT-2026-138993

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A remote authenticated attacker can execute arbitrary code because the system does not properly control the modification of obje...

Linux Distros Unpatched Vulnerability : CVE-2026-114134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Black is the uncompromising Python code formatter. Prior to 26.10.1, the Black GitHub Action with usepyproject: true accepts tool.black.required-version from...

Linux Distros Unpatched Vulnerability : CVE-2026-123095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdlhook script that allows remote attackers to add unchecked entries by...