CVE-2022-26134

CVE-2022-26134 Confluence Pre-Auth Object-Graph Navigation Language OGNL Injection Confluence is a web-based workspace collaboration product that is developed by Atlassian. It can be deployed on-prem or as part of Atlassian Cloud. It consists of 3 key features: page, space and page tree. Page: Yo...

Anti_Killer

This repository does not have a README...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ BIOS Image Parser...

hook

hook submodule for gitrce: https://github.com/EQSTSeminar/gitrce Attack Scenario kali192.168.216.129 --Give remote repository address-- Win192.168.216.130 kali192.168.216.129 --Git clone && hook scriptpost-checkout execution-- Win192.168.216.130 Disclaimer This repository is not intended to be gi...

CVE-2024-53677

This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit nofile=122880:122880 -m 3G...

asminject

asminject.py asminject.py is a heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly or precompiled binary payloads directly into x86-64, x86, and ARM32 Linux processes by accessing /proc//mem instead of attaching via ptrace. Useful for tampering with trusted...

bigip-scanner

BIG-IP Scanner Determine the running software version of a remote F5 BIG-IP management interface. Developed with ❤️ by the Bishop Fox Cosmos team. Description CVE-2022-1388, a critical vulnerability in the F5 BIG-IP management interface, allows an attacker to bypass authentication and remotely...

vRealizeLogInsightRCE

VMSA-2023-0001 POC for VMSA-2023-0001 affecting VMware vRealize Log Insight which includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability CVE-2022-31706 VMware vRealize Log Insight broken access control Vulnerability CVE-2022-31704 VMware vRealize Log Insight...

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEsca...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview Field| Details ---|--- CVE ID| CVE-2026-0848 Package| nltk Natural Language Toolkit Registry| PyPI Affected Versions| = 3.9.2 Vulnerability...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 Vulnerability Tester Automated security testing tool for CVE-2023-33177 - Zip Slip Path Traversal vulnerability in Xibo CMS that leads to Remote Code Execution RCE. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Only use on systems you own...

CVE-2025-68613

CVE-2025-68613 — n8n RCE via Expression Injection For educational and authorized security research purposes only. Overview Critical RCE vulnerability CVSS 9.9 in n8n workflow automation platform. Authenticated users can execute arbitrary OS commands via the executeCommand node, bypassing sandbox...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

CVE-2023-4220-PoC

CVE-2023-4220 Arbitrary File Upload / RCE - PoC I created this script to automate the exploitation of CVE-2023-4220 and obtain a reverse shell on the Hack The Box PermX machine. This vulneraibilitie affects Chamilo LMS versions ≤ 1.11.24 , due to insufficient validation in the big upload...

Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529-

Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529- CTT-Enhanced iOS Safari Exploit based on CVE-2025-43529...

react2shell-scanner-CVE-2025-55182

React2Shell Enterprise Scanner High-fidelity vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 - Remote Code Execution vulnerabilities in React Server Components / Next.js. 📖 For detailed technical analysis, exploit mechanics, and IOC data, seeSECURITY-RESEARCH.md ⚠️ DISCLAIMER This tool...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Proof of Concept for CVE-2025-8110 - Remote Code Execution in Gogs via symlink bypass and sshCommand injection. Description This exploit abuses a symlink bypass in Gogs API to overwrite .git/config and inject malicious sshCommand that executes a reverse shell...

Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

The plugin install flow in Claude Code and Claude Desktop checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting HEAD matched the pinned SHA. An attacker controlling a plugin's upstream repository could create a branch named identically to the pinned...

EUVD-2026-100461

Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary Field| Detail ---|--- CVE ID| CVE-2021-41773 Affected Software| Apache HTTP Server...