Tekon SCADA Privilege Escalation

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Author Mohammed Idrees Banyamer Security Researcher GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Description CVE‑2026‑26335 is a critical unauthenticated remote code execution vulnerability in...

CVE-2025-68613-POC

🚨 CVE-2025-68613: Critical RCE Vulnerability in n8n Table of Contents 1. Overview 2. What is n8n? 3. Vulnerability Basics 4. Technical Details 5. Affected Versions 6. Exploitation Mechanics 7. Real-World Impact 8. Detection Methods 9. Remediation & Mitigation 10. Resources & References Overview...

Exploit-For-CVE-2026-18963

CVE-2026-18963 — Keycloak Unauthenticated Account Takeover CVSS 9.1 Critical · Keycloak 26.0.0 – 26.7.1 · Unauthenticated A critical vulnerability in Keycloak's reset-credentials flow that allows an unauthenticated attacker to take over any user account without email verification by chaining two...

nginx-rift-detector

NGINX Rift Detector for CVE-2026-42945 Read-only Bash checker for owned NGINX servers. It helps an operator answer two questions after the CVE-2026-42945 disclosure: Is this server still running an exposed NGINX build or risky rewrite configuration? Do local logs show crash, long-URI, or encoding...

Log4Shell-CVE-2021-44228-

Log4Shell CVE-2021-44228 - SOC Report Analysis Overview This repository contains a comprehensive Security Operations Center SOC analysis of Log4Shell CVE-2021-44228 , one of the most critical vulnerabilities discovered in 2021. The vulnerability affects the Apache Log4j logging library and poses ...

zimaos-cve-2026-28286-arbitrary-file-write

🚨 CVE-2026-28286 — ZimaOS Arbitrary File Write From API Misconfiguration → Arbitrary File Write → Potential System Compromise ⚡ TL;DR Endpoint: /v21/files/file Issue: No path validation Impact: Arbitrary file write outside the intended directory Severity: 🔴 Critical 🧪 Quick Start git clone...

CVE-2026-25548

CVE-2026-25548 — Remote Code Execution in InvoicePlane 1.7.0 Vulnerability: Remote Code Execution via Local File Inclusion + Log Poisoning Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Critical CVSS 3.1 Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CW...

CVE-2026-29000

CVE-2026-29000 — pac4j-jwt JWE Authentication Bypass CTF lab for researching the JWE authentication vulnerability in the pac4j-jwt library CVSS 9.3 Critical · CWE-287 · Affected: pac4j-jwt ← access admin panel ↓ Read sensitive data: employee list, system config, flag Project structure...

OpenVAS-Vulnerability-Assessment-Incident-Response

Operation SecureScan — OpenVAS Vulnerability Assessment & Incident Response Project Overview This project demonstrates a complete Vulnerability Assessment and Incident Response workflow using OpenVAS Greenbone Vulnerability Manager in a controlled cybersecurity lab environment. The assessment...

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 About the Vulnerability React2Shell is a critical Remote Code Execution RCE vulnerability that affects: Target| Versi Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️...

Ashwesker-CVE-2026-21858

🚨 CVE-2026-21858 — “Ni8mare” A critical, unauthenticated vulnerability allowing full compromise of n8n servers 🆔 Overview Field| Details ---|--- CVE ID| CVE-2026-21858 Codename| Ni8mare Severity| 🔴 Critical CVSS Score| 10.0 Maximum Attack Vector| 🌐 Network Authentication Required| ❌ None User...

CVE-2026-41940-PoC-Exploit

CVE-2026-41940 - cPanel/WHM Authentication Bypass Exploit cPanel & WHM Edition - CRLF Injection to Authentication Bypass & Full Session Hijacking Overview This exploit leverages CVE-2026-41940 , a critical authentication bypass vulnerability in cPanel/WHM. By injecting a crafted CRLF payload into...

log4j-vuln-demo

log4j-vuln-demo Intentionally vulnerable demo image for Sysdig CNAPP scanning and remediation testing. Contains Log4j 2.14.1 — vulnerable to CVE-2021-44228 Log4Shell, CVSS 10.0 Critical. Purpose This repo exists to demonstrate Sysdig's end-to-end CNAPP workflow: 1. /sysdig-investigate — surfaces...

ethical-hacking-CVE-2011-2523

Ethical Hacking | Assessment 1 Practical Vulnerability Testing - CVE-2011-2523 vsftpd 2.3.4 Backdoor Module: - Ethical Hacking University: London Metropolitan University Programme: BSc Hons Cyber Security and Forensic Science Legal Disclaimer All activities were conducted in a controlled, isolate...

CVE-2023-22809

CVE-2023-22809 CVE-2023-22809 is a critical vulnerability that affects the popular sudo software, specifically the sudoedit command. This vulnerability allows an attacker to gain root privileges on a targeted system by exploiting a flaw present in the sudoedit command. Exploiting the CVE-2023-228...

CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 in Ruby Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications,...

Patch-management-

Patch-management- Enterprise Patch Management Scenario – "Critical Patch Response for Financial Systems" Background You are the IT Administrator for a multinational financial services company that operates across India, the US, and Europe. A critical vulnerability Ex: CVE-2025-4321 - must identif...

CVE-2025-4517-poc

CVE-2025-4517 PoC – Python tarfile Arbitrary File Write via Path Traversal CVE-2025-4517 CVSS 9.4 – Critical A vulnerability in Python's tarfile module that allows arbitrary file writes outside the extraction directory when using TarFile.extractall or TarFile.extract with filter="data" or...

CVE-2026-8838-RCE

CVE-2026-8838 — Amazon Redshift Python Driver: Remote Code Execution via eval ⚠️ Educational Use Only Research and demonstration project in offensive cybersecurity conducted exclusively for educational and awareness purposes. Any use on systems without explicit authorization is illegal. This...