Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution

CVE-2023-38831 Reverse Shell Demonstration This repository contains a PDF summary and screenshots of a lab-based demonstration of CVE-2023-38831. The vulnerability allows attackers to embed and execute malicious payloads in compressed files. In this case, the payload triggers a reverse shell...

CVE-2026-34444

CVE-2026-34444 CVE-2026-34444Sandbox escape and RCE due to incomplete attributefilter enforcement in getattr/setattr...

VulTriage

An intelligent vulnerability detection framework based on Large Language Models and static code analysis, supporting multi-dataset evaluation and ablation studies. 📋 Table of Contents Introduction Key Features System Requirements Quick Start Usage Datasets & Models FAQ Introduction This project i...

CVE-2009-2265

cf8-upload.py ⭐ a python3 script to exploit CVE-2009-2265. the exploit - CVE-2009-2265 ❗ the script exploits a vulnerability found in FCKeditor 2.6.4.1 which was implemented into adobe coldfusion 8.0.1: https://vulners.com/cve/CVE-2009-2265 the script allows the user to submit a file to upload to...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

CVE-2026-48909

CVE-2026-48909 — SP LMS PHP Object Injection → RCE Unauthenticated Remote Code Execution via PHP Object Injection in JoomShaper SP LMS comsplms ≤ 4.1.3 for Joomla CMS. Author: Amin İsayev / Proxima Cyber Security Overview SP LMS is a popular Joomla Learning Management System extension by JoomShap...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticated Update Remote Code Execution Vulnerability Usage: python3 cve-2022-24644poc.py Details in the report at gerr.re. Steps to reproduce 1. Install KeyMouse Windows 3.08; 2. Set spoof www.keymouse.com to our attacker ip; For the...

GuardScan

🛡️ GuardScan 100% Free & Open Source • Privacy-First Security Scanning and AI Code Review CLI / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | | |// \| \/ |/ // \| | ||| Privacy-First...

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Disclaimer: This repository is intended for educational and authorised security research purposes only. All techniques demonstrated here should only be used against systems you own or have explicit written permission to test. The...

Noctyra

Noctyra Noctyra is an AST-based framework designed for code transformation and deobfuscation. It provides a modular pipeline to analyze and simplify Python source code by resolving complex expressions and logic. Overview The project aims to provide a flexible environment for processing Python's...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...

EUVD-2026-113006

P-Net before 1.0.3, when built with PNETOPTIONARVENDORBLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the buffer size or the block...

CVE-2026-111732

Versions of P-Net prior to 1.0.3 are vulnerable to an out-of-bounds write when built with the PNET_OPTION_AR_VENDOR_BLOCKS option enabled. The software fails to validate a data length field from an ARVendorBlock request against the fixed-size buffer capacity, using the provided length as the byte...

CVE-2026-118021

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the XPCOM component...

CVE-2026-111730

P-Net versions prior to 1.0.3 are vulnerable to an out-of-bounds write within the get_check_peer() function. The root cause is a failure to validate the LengthPeerStationName field of a CheckPeers block , where a received length of up to 255 is used to copy data into a fixed 241-byte buffer . Thi...

EUVD-2026-113004

P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in getcheckpeer. The received length up to 255 was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end o...

Malicious code in 789bet-login-th (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf974d2b6e808204775e9ca87b873c9099e447c29af9ea50d1c1ef019c1f25c The package ships minimal content 2 files scanned with no lifecycle scripts, no install-time or import-time network activity, no credential or...

Malicious code in m98th (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affe0f39dc539ebc88bb056595ac821969f59fbe3430c5e1465178396b5812e0 Package m98th version 0.0.0-stage contains two files with no detected malicious behavior. No lifecycle scripts, no network calls to attacker-controll...

MAL-2026-18391 Malicious code in m98vip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be41525afad86d596ecb8f7d28c8ac31b014cf81f337a0f3a548ccd8659eb452 Package m98vip at version 0.0.0-stage contains two files with no detected installer-facing threats. No lifecycle scripts, remote fetch-and-execute,...

openclaw-vuln-report

OpenClaw Vulnerability Analysis Report Chinese Interpretation of Security Vulnerability CVE-2026-25253 Read Online GitHub Pages: https://joseph19820124.github.io/openclaw-vuln-report/ Vulnerability Summary CVE : CVE-2026-25253 Score : CVSS 8.8 High Type : Cross-Site WebSocket Hijacking Impact :...