POC-CVE-2026-19679

CVE-2026-19679 — insufficient sanitization of uploaded filenames input validation Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. POST /rest/auditFile with tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" returned HTTP 200 and registered AuditFile 1000002 — the shell-metachar filena...

HTB_Nibbles

HTBNibbles In this repository you will find the technical report of Nibbles, the exploit pwned.py to abuse the CVE-2015-6967 and an autopwn tool autopwn.py in case you want to resolve the machine in HackTheBox. Pwned.py tool: This file will help you to exploit CVE-2015-6967. If you want to run th...

Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

This repository does not have a README...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan !alt textcitrix This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability...

Ghostcat

Ghostcat CVE-2020-1938 exploit...

unrealircd-backdoor-pentest-report

🛡️ UnrealIRCd Backdoor Penetration Test A controlled penetration testing project focused on identifying, exploiting, and remediating the UnrealIRCd 3.2.8.1 backdoor CVE-2010-2075 in an isolated training environment. Disclaimer: This project was conducted strictly for educational and authorized...

CVE-2022-2602

CVE-2022-2602 This repository contains exploits for CVE-2022-2602. There are two versions of it: Exploit using userfaultfd technique. Exploit using inode locking technique. Enjoy! : LukeGix...

BigFinger

CVE-2023-46747 - Big-IP RCE Unauthenticated This is a Python3 script to exploit the unauthenticated remote code execution vulnerability CVE-2023-46747 in F5 BIG-IP appliances via the TMUI interface. Basically, if this vuln hits, you get a shell without credentials. Built with threading, file inpu...

CVE-2018-10933_Scanner

CVE-2018-10933Scanner is a tool to detect libssh versions vulnerable to CVE-2018-10933. It allows scanning from a single target to a full list of IP addresses, and also shows the location of the vulnerable server. + Contact: x Facebook: http://fb.me/IDX4CKS x Twitter: @IDX4CKS x Email:...

system_bt_AOSP10_r33_CVE-2021-0435

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

CVE-2015-8562

This repository does not have a README...

CVE-2009-0347

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2009-0347 Run bellow command to check CVE-2009-0347 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2026-115892

creationtimestamp| type| source ---|---|--- 2026-10-23 21:37:00+00:00| seen| https://infosec.exchange/users/cve/statuses/117492378466257178...

cve-2020-1054

CVE-2020-1054 CVE-2020-1054 LPE for Windows 7x64 Usage Install Rust if you need it https://www.rust-lang.org/learn/get-started Compile the code: cargo build --release Copy the .exe from target/release/ to target and execute. Windows KB If a specific Windows KB is not installed slight changes to t...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list CVE| Name| Aliases ---|---|--- CVE-2017-5753| Bounds Check...

CVE-2026-115889

creationtimestamp| type| source ---|---|--- 2026-10-23 21:36:19+00:00| seen| https://infosec.exchange/users/cve/statuses/117492375823187905...

cve-2017-7529

CVE-2017-7529 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-7529 Image author: https://github.com/Medicean/VulApps/tree/master/n/nginx/1...

CVE-2015-4670 Vuln App

This repository does not have a README...

CVE-2019-16405.rb

This repository does not have a README...

cve-2026-9198_exploit

CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 – 1.10.0 on a default deployment. Chains two flaws: CVE-2026-9103 — GET /api/v1/autologin mints a SUPERUSER JWT to any caller with no credentials whenever AUTOLOGIN is enabled the...