CVE-2018-1263-Demo

Exploit Demo This guide will help you to install vulnerable component and perform the attack related to phpMyAdmin bug mentioned in CVE-2018-1263. Description of CVE Why does the vulnerability exist How does the attack work How to install vulnerable component How to perform the attack Description...

CVE-2026-3288-lab

CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Controller Configuration Injection ⚠️ WARNING : This lab contains intentionally vulnerable configurations for AUTHORIZED SECURITY TRAINING ONLY Vulnerability Overview CVE-2026-3288 CVSS 8.8 HIGH - Configuration injection in NGINX Ingress Controller...

Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution-Exploit

This repository does not have a README...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

Emojify

Emojify 🔋⌚🐆💀 ⌛ 🌵 🌵 🌈 🍡 🥚 👖 👢🎹🎹 🍬 🌽 🔋 🍟🔨 🔑🍟 🚀 🍭 🗼 🎍 💄 🍬🌽 ⌛🌷💀 🌵 🚬 🌵 ⚽ 🎱 🥚 👖 👢🎹🎹 🚩 🔋 🍟 🍟 🎱 ⚽ 🗼 🎍 💄 🎌 ⌛ 🌵 🌵 🍭 🔪 👝 🥚 👖 👢 🏁 🔋⌚🐆💀 🍟 🍟 🔪🏈 🎽💼🗼 🎍 💄 🚩 Obfuscates charcater and string literals into emojis and randomises classes, interfaces, methods and variable names. NB Inherited, overriden and implemented...

CVE-2025-68613

CVE-2025-68613 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by...

CVE-2026-2005_lab

CVE-2026-2005 — PostgreSQL pgcrypto Heap Overflow Lab A self-contained Docker lab for practicing exploitation of CVE-2026-2005, a heap buffer overflow in PostgreSQL's pgcrypto extension that enables remote code execution without superuser privileges. Affected versions: PostgreSQL ≤ 17.7 / 16.11 /...

CVE-2026-17532-lab

CVE-2026-17532 Lab - Seraphinite Accelerator: unauth XSS → 1-click RCE A Docker lab for CVE-2026-17532 , an unauthenticated reflected XSS in the WordPress plugin Seraphinite Accelerator that chains into remote code execution the moment a logged-in administrator opens one crafted link. Full writeu...

CVE-2021-29267

CVE-2021-29267 SherlockIM ChatBot XSS Suggested description: SherlockIM is vulnerable to Persistent XSS. Additional Information: SherlockIM - Platform for manage all kind of conversations with customers. Vulnerability Type: Cross Site Scripting XSS A letter was sent to the vendor about the...

CVE-2024-28515

CVE-2024-28515 Description Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Information CNVD has completed verification of this vulnerability, but it has not...

Important: Red Hat Security Advisory: aspell security update

An update for aspell is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

aspell: aspell: Arbitrary code execution via crafted dictionary file

A flaw was found in Aspell. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to process a specially crafted dictionary file. This issue occurs due to an integer calculation error during buffer capacity checks in the read-only dictionary...

CVE-2025-32433-Exploit-edited

CVE-2025-32433 Exploit Windows Compatible Erlang/OTP SSH Unauthenticated Remote Code Execution Description This repository contains an exploit for CVE-2025-32433, a critical unauthenticated remote code execution vulnerability in Erlang/OTP SSH server. Key Features: ✅ Pre-authentication RCE exploi...

CVE-2026-60004-POC

CVE-2026-60004 — Gitea Pre-Auth Remote Code Execution CVSS 9.8 ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

cve-2026-21877-rce

This repository does not have a README...

CVE-2024-50969

CVE-2024-50969 Description A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Code-projects...

CVE-2026-22738

CVE-2026-22738 Reproduction Environment Vulnerability Description CVE-2026-22738 is a SpEL Spring Expression Language injection vulnerability in Spring AI SimpleVectorStore that can lead to unauthenticated remote code execution RCE. Affected Versions Artifact| Affected Versions| Fixed Versions...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LID? The Linux...

react-rsc-cve-2025-55182-lab

CVE-2025-55182 Lab — React Server Components RCE Educational lab demonstrating CVE-2025-55182 — a critical CVSS 10.0 Remote Code Execution vulnerability in React Server Components caused by prototype pollution in the Flight protocol deserializer. Disclaimer: This repository is for educational and...

CVE-2022-31814

CVE-2022-31814 Reworked and optimized exploit script of pfBlockerNG 2.1.426 vulnerability Exploit Title: pfBlockerNG 2.1.426 - Remote Code Execution RCE Shodan Results: https://www.shodan.io/search?query=http.title%3A%22pfSense+-+Login%22+%22Server%3A+nginx%22+%22Set-Cookie%3A+PHPSESSID%3D%22 Dat...