hackcar-writeup

Hackcar - Writeup Platform: DockerLabs Difficulty: Medium more or less, it has its quirks Objective: From webuser to root by breaking a Next.js The start: reconnaissance As always, first things first: see what we're up against. nmap -sC -sV -T4 172.17.0.2 PORT STATE SERVICE VERSION 8080/tcp open...

CVE-2026-96630

Adminer blocks "ATTACH" queries for SQLite to prevent arbitrary file creation. However, "VACUUM INTO" is not blocked and achieves the same result: writing a database file containing attacker-controlled PHP code to any path with any extension. An authenticated SQLite user can write a web shell to...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — my friend Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Repo Contents File|...

wasm2c-tableflip

wasm2c sandbox escape: guest module runs a shell command on the host Read the blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc sets table-size from the module's declared element count and then ignores the result of calloc. When the allocation fails the table i...

poc-yaws-cgi-shell-injection

OS command injection in Yaws web server CVE-2020-24916 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:shell-injection-appmod-cgi curl...

CVE-2025-47550

Instantio - Wordpress Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

Vulnerability Assessment and OSINT: CVE-2012-1823 My repository documents the process of identifying, analyzing, and gathering Open Source Intelligence OSINT on a specific security vulnerability detected during a target network scan. Overview of the Process The workflow carried out across this...

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — CodeIgniter 4 Validation Rule Injection CVE-2023-32692 is a code injection vulnerability in the CodeIgniter 4 PHP framework, affecting versions 4.0.0 through 4.3.4. It was fixed in 4.3.5 released June 2023. This is a demo environment for anyone that wants to play with it...

CVE-2024-25600

CVE-2024-25600 Unauthenticated Remote Code Execution – Bricks Usage: python3 bricks.py Example: python3 bricks.py https://example.org reference: https://github.com/Chocapikk/CVE-2024-25600...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2026-58073-check

Veeam Service Provider Console Agent Impersonation — Patch-State Detection Script A safe, unauthenticated detector for the KB4893 vulnerabilities in Veeam Service Provider Console published 2026-08-04. It answers one question per target, before any authentication or TLS: are the KB4893 fixes...

CVE-2026-96634

This vulnerability is a patch bypass that exploits catastrophic backtracking in a regular expression used to filter ATTACH statements in AdminNeo's SQLite functionality. The original vulnerability CVE-2021-43008 allowed authenticated users to create PHP files through SQLite ATTACH statements,...

n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate

n8n God Mode Ultimate - CVE-2025-68613 Scanner & Exploitation Framework Advanced n8n Workflow Automation RCE Scanner & Exploitation Tool 🎯 Overview n8n God Mode Ultimate is a comprehensive security testing framework designed to detect and validate CVE-2025-68613 in n8n workflow automation...

Myesve

myesve CVE-2024-38475 Exploitation Framework – Version 1.0 Disclaimer: This tool is intended for authorized security testing, educational research, and legitimate bug bounty programs only. Do not use it against systems you do not own or lack explicit permission to test. The authors assume no...

Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013

Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013 In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal a...

cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE Field| Value ---|--- CVE ID| CVE-2025-43564 CVSS Score| 9.8 CRITICAL Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-494 — Download of Code Without Integrity Check Exploitation| Confirmed in the wild within one week of disclosur...

patch-CVE-2026-15502

Patch: CVE-2026-15502 Vulnerability Details CVE : CVE-2026-15502 Product : Microsoft Exchange Server Description : SSRF leading to RCE Severity : Critical Patch Status: IN-REVIEW Field| Value ---|--- Patch Date| 2026-06-01 Status| in-review Deployed To| Production Validated By| SecOps Team...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Author Mohammed Idrees Banyamer Security Researcher 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2026-25939 , a critical authorization bypass vulnerability in FUXA open-source SCADA/ICS software. The vulnerability allows unauthenticated remote attackers to create,...

CVE-2022-22963

CVE-2022-22963 Educational proof-of-concept automation for CVE-2022-22963, demonstrated in an authorized Hack The Box lab environment. Overview CVE-2022-22963 is a Spring Cloud Function vulnerability involving the spring.cloud.function.routing-expression header. Under vulnerable configurations, a...

CVE-2026-17544

CVE-2026-17544 — PHP bcmath OOB write → universal memory-only RCE A weaponized proof-of-concept for CVE-2026-17544 , an out-of-bounds write in PHP's rewritten bcmath extension bcstr2num. This turns the publicly known DoS-only crash into a full, universal, memory-only remote code execution primiti...