1324003 matches found
CVE-2022-22965
🚨 CVE-2022-22965 — "Spring4Shell" Critical Remote Code Execution RCE vulnerability Publicly disclosed: March 31, 2022 📖 Table of Contents Overview Affected Components Technical Root Cause Exploitation Conditions Impact Severity & CVSS Mitigation & Patching Timeline Comparison with Log4Shell Summa...
CVE-2024-37054-PoC
MLflow Unsafe Deserialization CVE-2024-37054 Overview This repository documents research into CVE-2024-37054 , an unsafe deserialization issue affecting MLflow PyFunc model handling. In affected MLflow versions, loading an untrusted PyFunc model can cause Python deserialization logic to process a...
machscope
machscope machscope is a terminal-native macOS explorer that turns processes, launchd jobs, Mach services, bundles, signatures, entitlements, and Mach-O linkage into one interrogable graph. It exists to answer a simple question brutally well: What is this process, service, binary, or bundle reall...
CVE-2024-44625-Gogs-RCE-0.13.0
CVE-2024-44625 & Gogs-RCE-0.13.0 Validated against a 0.13.0-era Gogs behind a reverse proxy. Primitive: web editor symlink-follow to an ABSENT .git/hooks/pre-receive creates that file executable. Every subsequent push to the repo runs it. Usage: Reverse shell run listener first: nc -lvnp 4444...
CVE-2026-14282
CVE-2026-14282 — GoDAM WordPress Plugin RCE Author: nullwhisper Use case: authorized security research / vulnerability validation only. What is this? GoDAM WordPress plugin versions = 1.12.2 register a WPForms field called godamrecord. The upload handler savevideofile is hooked into the public...
CVE-2025-27636-Practical-Lab
🛡️ CVE-2025-27636 — Practical Exploitation Lab for Apache Camel 🔍 Overview CVE-2025-27636 is a critical Remote Code Execution RCE vulnerability in Apache Camel , specifically in the camel-exec component. It stems from a subtle but dangerous issue: TheDefaultHeaderFilterStrategy performs...
php-8.1.0-dev-backdoor-rce
PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...
EXPLOIT-CVE-2026-8832
EXPLOIT CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...
Exploiting-Samba-on-Metasploitable-2
Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...
watchTowr-vs-FortiWeb-CVE-2025-25257
watchTowr-vs-FortiWeb-CVE-2025-25257 Detection Artifact Generator for FortiWeb CVE-2025-25257 See our blog post for technical details https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Detection in Action python watchTowr-vs-FortiWeb-CVE-2025-25257.py --target...
CVE-2026-63223-POC
CVE-2026-63223 PoC — CodeIgniter 4 File Upload RCE CVSS 9.8 Critical | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 : Unrestricted Upload of File with Dangerous Type Fixed : CodeIgniter 4 v4.7.4 Advisory : GHSA-mmj4-63m4-r6h5 Vulnerability Summary CodeIgniter 4's isimage and mimein file upload...
CyberhawksLab-telnetCVE
CyberHawks lab demo finding report Credit to: @SafeBreach-Labs CVE: CVE-2026-24061 Lab: Cyberhawks Lab Target: 10.1.1.1 demo.cyberhawks.lab Finding ID: WU-08 Date: 2026-09-08 Severity: Critical Status: Confirmed / Exploited Executive Summary During an assessment of the Cyberhawks lab environment,...
apache2.4.49VulnerableLabSetup
apache2.4.49VulnerableLabSetup CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. This repo is to simulate the vulnerability...
bidi-guard
bidi-guard Scan code for invisible bidirectional Unicode characters Why This Exists Invisible Unicode bidirectional characters can make source code display differently than it executes. This is CVE-2021-42574 — the Trojan Source attack. An attacker embeds characters that reverse text direction. I...
CVE-2019-11043-Vulnerability
Collaberators: Olaf Madejski, Andrew Masone, Nate Desany PHP-FPM Reverse Tunnel Exploitation & Persistence Demonstration CVE-2019-11043 — Debian PHP-FPM Path Handling Vulnerability Project Overview In October 2019, Debian Security Advisory researchers Emil Lerner and Andrew Danau published a noti...
CVE-2025-55182-NextJS-RCE-PoC
CVE-2025-55182 React2Shell Reproduction Environment ⚠️ EDUCATIONAL PURPOSE ONLY This repository is created strictly for educational and research purposes. It demonstrates a critical vulnerability in React Server Components Next.js to help developers understand the risks and importance of updating...
CVE-2021-1675
🖨️ CVE-2021-1675 — PrintNightmare Windows Print Spooler RCE/LPE Type: Proof of Concept — Simulated Non-Functional CVE: CVE-2021-1675 + CVE-2021-34527 CVSS: 7.8 LPE / 8.8 RCE Alias: PrintNightmare Patched: June/July 2021 — KB5004945 Added to CISA KEV: July 2021 ⚠️ The payload of this PoC is...
CVE-2020-10567
POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...
CVE-2023-22527_Confluence_RCE
CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...