CVE-2026-11119-Padding-Oracle-Attack-on-CBC-Mode-Encryption

CVE-2026-11119 – Padding Oracle Attack on CBC Mode Encryption Program Code Python paddingoracleserver.py - Server that returns padding error from flask import Flask, request from Crypto.Cipher import AES from Crypto.Util.Padding import pad, unpad import os key = os.urandom16 app = Flaskname...

CVE-2026-69084-PoC

CVE-2026-69084 / CVE-2026-69085 — SiYuan Arbitrary SQL Execution & SQLi CVE-2026-69084: Arbitrary SQL Execution via /api/search/searchEmbedBlock CVE-2026-69085: SQL Injection via /api/filetree/searchDocs CVSS 9.9 Critical each · CWE-89 · SiYuan --check 2. DB-write proof: CREATE TABLE + INSERT...

CVE-2024-40898

CVE-2024-40898 This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request. It...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 Vulnerability Analysis A cybersecurity project exploring a real-world vulnerability,its potential impact,and how security teams can detect,fix,and verify the issue. Project Overview This project is part of my cybersecurity learning journey. I selected...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introduction: Apache Struts 2 is an open source web application framework for developing Java EE Web applications,It is the second generation of the struts framework first released on 10th Oct 2006. Struts Framework is designed in a way that it helps creating Web...

cve-2025-13486-vuln-setup

CVE-2025-13486 Vulnerable Test Environment One-shot Docker setup for testing ACF Extended RCE vulnerability. Quick Start 1. Download plugins run once ./download-plugins.sh 2. Start environment docker-compose up -d --build 3. Wait 30 seconds for setup, then test nuclei -t CVE-2025-13486.yaml -u...

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

CVE-2026-11110 – AES-GCM Nonce Reuse Leading to Key Recovery Program Code Python aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def encryptplaintext: cipher = AES.newkey,...

CVE-2026-11104-Python-SSTI-via-Jinja2-attr-Filter-Bypass

CVE-2026-11104 – Python SSTI via Jinja2 |attr Filter Bypass Program Code Flask vulnerableapp.py - Flask with Jinja2 SSTI via 'attr' filter from flask import Flask, request, rendertemplatestring app = Flaskname @app.route'/' def index: name = request.args.get'name', 'World' UNSAFE: directly render...

CVE-2024-4577

🚀 CVE-2024-4577: PHP CGI Argument Injection Scanner and Exploit 🛡️ Overview CVE-2024-4577 is a critical vulnerability affecting PHP applications that utilize the Common Gateway Interface CGI. This tool serves as both a scanner and an exploit , enabling cybersecurity professionals to: Detect PHP CG...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview Field| Details ---|--- CVE ID| CVE-2026-0848 Package| nltk Natural Language Toolkit Registry| PyPI Affected Versions| = 3.9.2 Vulnerability...

CVE-2025-47812-PoC

CVE-2025-47812 — Wing FTP Server Remote Code Execution RCE Overview Field| Value ---|--- CVE| CVE-2025-47812 Affected| Wing FTP Server 7.4.4 Type| Unauthenticated Remote Code Execution CVSS Score| 10.0 Critical Fixed in| Wing FTP Server 7.4.4 How it works The vulnerability exists in the...

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...

CVE-2026-33017

🚨 CVE-2026-33017 - Critical Unauthenticated Remote Code Execution in Langflow Langflow versions ≤ 1.8.2 contain a severe security vulnerability that allows unauthenticated attackers to achieve Remote Code Execution RCE on the server. 📊 Vulnerability Details Attribute| Details ---|--- CVE ID|...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary Field| Detail ---|--- CVE ID| CVE-2021-41773 Affected Software| Apache HTTP Server...

CVE-2025-68613-poc-via-copilot

✅ CVE-2025-68613 n8n Expression Injection RCE Vulnerability Complete Analysis Date : December 23, 2024 Status : ✅ RCE Fully Verified CVSS Score : 10.0 Critical 🎉 Successful RCE Payload function var require = this.process.mainModule.require; var execSync = require'childprocess'; return execSync'id...

react2shell

Description: CVE-2025-55182 is a critical unauthenticated remote code execution RCE vulnerability in the react-server package used by React Server Components RSC. CVE-2025-66478 is the corresponding RCE vulnerability in Next.js, which inherits the same underlying flaw through its implementation o...

React19-fix-vibecoders

React 19 & Next.js Security Fix Prompts for AI Agents 🚨 CRITICAL SECURITY VULNERABILITY - CVE-2025-55182 & CVE-2025-66478 This repository contains reusable prompts to help AI coding assistants automatically fix critical React/Next.js security vulnerabilities. 📋 What's Inside SECURITYFIXPROMPT.md...

CVE-2023-35078

CVE-2023-35078 Exploit Tool ██████╗ ███╗ ██╗███████╗███████╗ ██████╗ ██╔═████╗████╗ ██║██╔════╝██╔════╝██╔════╝ ██║██╔██║██╔██╗ ██║███████╗█████╗ ██║ ████╔╝██║██║╚██╗██║╚════██║██╔══╝ ██║ ╚██████╔╝██║ ╚████║███████║███████╗╚██████╗ ╚═════╝ ╚═╝ ╚═══╝╚══════╝╚══════╝ ╚═════╝ + CVE-2023-35078 - Ivan...

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 - Apache = 2.4.48 - SSRF Python exploit A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. CVSS v3.1: Base Score: 9.0 Severity: CRITICAL...

Bot-exploit-CVE-2025-55182

React2Shell Scanner – CVE-2025-55182 🔐 Educational tool for detection of vulnerability CVE-2025-55182 React2Shell in applications that use React Server Components / Next.js. 📌 About CVE-2025-55182 CVE-2025-55182 , known as React2Shell , is a critical vulnerability affecting React Server Component...