PT-2026-106707

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2024-22752

EaseUS MobiMover 6.0.5 Build 21620 - Insecure Files and Folders Permissions MobiMoverUILaunch.exe suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the executable file of the service with a binary of his choice under bin folder . The...

CVE-2026-71981

Cypht CVE-2026-71981 PoC これはCVE-2026-71981（安全でないデシリアライゼーションによるRCE）のPoCです。実行したコマンドの結果は、ログアウトリクエストのレスポンス内のタグの後に出力されます。レスポンス全体も表示するには--print-allを使用してください。 影響を受けるバージョン: v2.12.2 依存関係のインストールと実行 このスクリプトは、unserializeペイロードを生成するために https://github.com/ambionics/phpggc のインストールが必要です。 セットアップと実行例: python3 -m ve...

EXPLOIT-CVE-2024-7804

CVE-2024-7804 — PyTorch分散型RPCの安全でないデシリアライゼーション（RCE） CVE-2024-7804 の自己完結型ラボ＋エクスプロイト：PyTorchの分散型RPCフレームワーク（torch.distributed.rpc）における、信頼されていないデータの安全でないデシリアライゼーション（CWE-502 ）によるリモートコード実行。 影響を受けるバージョン: torch 注：このアドバイザリは後にメンテナおよびRed Hatによって「既知の機能」として撤回/却下 されました — PyTorch RPCは設計上 信頼できるピア...

CVE-2022-21392

CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager In Oracle installations, where the “nmr” binary is present and SUID-ed as “root”, due to insecure directory permissions, the “oracle” user can elevate his/her privileges to that of the “root” user by replacing th...

CVE-2024-34223

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vulnerability Insecure Permission Description Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave...

react2shell-CVE-2025-55182-full-rce-script

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-

CVE-2025-64512 - pdfminer.six 원격 코드 실행 RCE -orange 경고 – 교육 목적으로만 사용 본 개념 증명PoC은 승인된 보안 테스트 및 교육 목적으로만 제공됩니다. 소유한 시스템 또는 명시적인 서면 테스트 허가를 받은 시스템에서만 사용하십시오. 작성자는 이 코드로 인한 오용이나 손해에 대해 책임지지 않습니다. 설명 CVE-2025-64512 는 PDF 파일에서 텍스트와 메타데이터를 추출하는 널리 사용되는 Python 라이브러리인 pdfminer.six의 치명적인 취약점입니다. 이 결함은 악성 PD...

CVE-2023-27524

CVE-2023-27524 Insecure Default Configuration in Apache Superset Leads to Remote Code Execution Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with $ git clone https://github.com/Pari-Malam/CVE-2023-27524 $ cd CVE-2023-27524 $ pip/pip3 install -r requirements.txt $...

comfyui-CVE-2026-68771-PoC

CVE-2026-68771 — ComfyUI: 安全でないデシリアライゼーションによる未認証RCE 教育目的のみ。所有しているシステム、またはテストの明示的な書面による許可を得ているシステムに対してのみ使用してください。 ComfyUIについて...

CVE-2024-34221

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vulnerability Insecure permission Description There is an insecure permission vulnerability in /hrm/controller/ccity.php?positionedit= in the SourceCodester Human Resource Management System 1.0, allowing...

CVE-2023-27524

CVE-2023-27524 Apache Superset Auth Bypass CVE-2023-27524 Reference https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524 https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/...

ThemeBleedPy

A huge thanks to gabek for the initial PoC in C, and actually finding this CVE, this is a remake of his code in python, reusing his stage files. To see the initial PoC view his page for it here: https://github.com/gabe-k/themebleed ThemeBleedPy A proof of concept using python for the CVE-2023-381...

CVE-2020-35728

설명 FasterXML jackson-databind 2.x 버전 2.9.10.8 이전에서는 직렬화 가젯과 타입 간의 상호작용을 잘못 처리합니다. 이는 com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPoolorg.glassfish.web/javax.servlet.jsp.jstl에 포함된 Xalan과 관련이 있습니다. RCE 방법 pom.xml 4.0.0 com.jacksonTest jacksonTest 1.0-SNAPSHOT...

CVE-2017-5645

CVE-2017-5645 CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization...

Astra Linux – Vulnerability in libzstd

Starting from v1.4.1 and before v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and immediately restricted those permissions afterward. As a result, the output files could temporarily be readable or writable by...

Codiad-CVE-2018-14009

install codiad @ git clone https://github.com/Codiad/Codiad.git Steps to reproduction 1. Setup a vulnerable environment on ubuntu server with Codiad 2.8.4 latest version @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git clone...

exploit-react-CVE-2025-55182

FOX-RSC TOOL CVE-2025-55182 & CVE-2025-66478 LEGAL DISCLAIMER EN: This tool is a Proof of Concept PoC intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author Tiger-Foxx assumes no...

CVE-2026-103078 WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...

p4wned

P4WNED CVE-2026-6043 Perforce Helix Core security research tools and nuclei templates. Research article: https://morganrobertson.net/p4wned/ Please read the above for complete details. Authorised targets only. Use on your own servers or with explicit written permission. Intended audience: Perforc...