CVE-2025-7775

CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server OR NetScaler ADC and NetScaler Gateway 13.1,...

CVE-2025-12674

CVE-2025-12674 KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload 🐚 KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload 📝 Description The KiotViet Sync plugin for WordPress versions up to and including 1.8.5 is vulnerable to arbitrary file uploads, due to missing file type...

CVE-2025-63602

CVE-2025-63602 Disclosure for CVE-2025-63602, including a PoC for use of an insecure driver in Awesome Miner 11.2.4 leading to arbitrary kernel read/write to MSRs, resulting in kernel code execution...

CVE-2025-55182-React2Shell-RCE-POC

CVE-2025-55182 - React2Shell RCE This repository documents research into CVE-2025-55182, also known as React2Shell, a critical unsafe deserialization vulnerability in React Server Components RSC and frameworks that embed the RSC Flight protocol, especially Next.js App Router. The focus here is on...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Apache ActiveMQ RCE Proof of Concept Assignment: SSP Assignment 3 Team: RCE You Later Members: Banica Horia Alexandru, Comarlau Vlad-Constantin Video link of using the repo to do the PoC:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 Overview This repository contains a fully...

sk-cve-2026-26030-lab

CVE-2026-26030 — Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...

CVE-2023-21716-Analysis-ICT287

CVE-2023-21716 Analysis-ICT287: Microsoft Word Remote Code Execution Overview This repository documents the analysis and reproduction of CVE-2023-21716, a heap-based buffer overflow vulnerability in Microsoft Word's RTF parser with a CVSS score of 9.8 Critical. What's Inside File| Description...

CVE-2026-5203

CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple ≤ 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator to upload arbitrary files e.g. PHP web shells...

DiffCatcher

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. A Rust CLI tool that recursively discovers Git repositories, captures state changes,...

cve-2010-1938

🚀 CVE-2010-1938 FTP Off-by-One Exploit A simple Python script to test an off-by-one vulnerability in the OPIE library CVE-2010-1938. This vulnerability affects certain FTP servers and may allow for Denial of Service DoS or arbitrary code execution. 📜 Description This script targets a known...

CVE-2026-4480-POC

CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal & Arbitrary File Write Authenticated This repository contains a Proof of Concept PoC exploit for CVE-2026-6815, an arbitrary file write and path traversal vulnerability in Casdoor. The vulnerability has been fixed in version 3.54.1...

connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 和 CVE-2024-1709 由 @watchTowr 开发的概念验证（PoC），利用身份验证绕过漏洞在 ConnectWise ScreenConnect 中添加新的管理用户。这是简单的远程命令执行链的第一步。 关注 watchTowr 实验室团队，获取我们的安全研究 https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...

Noregressh

Originally I wanted to build a regreSHHion scanner and exploiter. I then added additional CVEs to it. If anyone can help me expand parts of the project, please get in touch. WELCOME TO NOREGRESSH Norregressh is a penetration-testing framework focused on OpenSSH regressions and multiple CVEs. It...

CVE-2025-49132-poc

CVE-2025-49132-poc I made this poc for CVE-2025-49132, as it was interesting to make and it's part of a challenge over at my cyber platform deepreview ! This CVE takes advantage of a file inclusion vulnerability that can be escalated to a Remote Code Execution with the pearcmd.php script. This is...

CVE-2025-55182-Exploiter

🛡️ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit 🔥 Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities — especially CVE-2025-55182 RSC Deserialization RCE. ✅...

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — "Dead.Letter" Exim Vulnerability Scanner A shell script for detecting whether a Linux system is vulnerable to CVE-2026-45185, a use-after-free in the Exim mail transfer agent that can lead to remote code execution. Designed for use in CI/CD pipelines, configuration management...

MAL-2026-16041 Malicious code in wallet-engine-signing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 448194cce4cee2143b4cfee29a7c171ecab686469ac508f8fb2ad4d2fb67cf67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-53690-Analysis

CVE-2025-53690: Sitecore ViewState Deserialization Vulnerability Analysis Overview CVE-2025-53690 is a critical ViewState deserialization vulnerability discovered in the Sitecore product suite, allowing remote code execution by exploiting exposed ASP.NET machine keys. Basic Information CVE ID :...

RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...