ThemeBleedPy

A huge thanks to gabek for the initial PoC in C, and actually finding this CVE, this is a remake of his code in python, reusing his stage files. To see the initial PoC view his page for it here: https://github.com/gabe-k/themebleed ThemeBleedPy A proof of concept using python for the CVE-2023-381...

CVE-2020-35728

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl. How to RCE pom.xml 4.0.0...

CVE-2017-5645

CVE-2017-5645 CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization...

Astra Linux – Vulnerability in libzstd

Starting from v1.4.1 and before v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and immediately restricted those permissions afterward. As a result, the output files could temporarily be readable or writable by...

Codiad-CVE-2018-14009

install codiad @ git clone https://github.com/Codiad/Codiad.git Steps to reproduction 1. Setup a vulnerable environment on ubuntu server with Codiad 2.8.4 latest version @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git clone...

exploit-react-CVE-2025-55182

FOX-RSC TOOL CVE-2025-55182 & CVE-2025-66478 LEGAL DISCLAIMER EN: This tool is a Proof of Concept PoC intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author Tiger-Foxx assumes no...

CVE-2026-103078 WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...

p4wned

P4WNED CVE-2026-6043 Perforce Helix Core security research tools and nuclei templates. Research article: https://morganrobertson.net/p4wned/ Please read the above for complete details. Authorised targets only. Use on your own servers or with explicit written permission. Intended audience: Perforc...

CVE-2025-63602

CVE-2025-63602 Divulgación de CVE-2025-63602, incluyendo un PoC para el uso de un controlador inseguro en Awesome Miner 11.2.4 que conduce a lectura/escritura arbitraria del kernel a MSRs, resultando en ejecución de código del kernel...

CVE-2025-54962

🔥 CVE-2025-54962 — Carga de archivos insegura en el servidor web de OpenPLC Runtime OpenPLC Runtime ≤ 2024-12-31 — XSS almacenado, CSRF 📌 Resumen Descubrí una vulnerabilidad en el servidor web de OpenPLC Runtime versión publicada: 2024-12-31 que permite a los usuarios autenticados subir archivos...

React2Shell-Scanner

Comprobador de Vulnerabilidades CVE-2025-55182 y CVE-2025-66478 Una herramienta de detección no intrusiva para identificar implementaciones vulnerables de React Server Components RSC afectadas por CVE-2025-55182 React y CVE-2025-66478 Next.js. Esta herramienta realiza detección activa mediante...

react2shell-vulnlab

React2Shell Tribune — VULNERABLE WEB APPLICATION LAB A modern Next.js web app themed as a news / blog portal for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional news portal built...

React2Shell-CVE-2025-55182

CVE-2025-55182 — React2Shell Unauthenticated RCE in React Server Components via insecure deserialization of the Flight protocol. A single HTTP request is enough to execute arbitrary code on the server — no credentials, no prior access needed. / / / /| |/ / \ / / / / / / / / // / / // / // | //...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

CVE-2026-105295

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic...

Electrolink-FM-DAB-TV

Electrolink-FM-DAB-TV For CVE-2025-51040 Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 Description Electrolink FM/DAB/TV Transmitter web management...

CVE-2026-94634

Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2025-55182

Vulnerabilidad React2Shell - CVE-2025-55182 📓 Introducción Esta vulnerabilidad, conocida como React2Shell, fue descubierta en diciembre de 2025 y afecta a componentes de next.js con una CVSS 10.0. Con una simple solicitud POST, es posible obtener un RCE crítico sin autenticación. A continuación s...

CVE-2022-35513

blink1-pass-decrypt ⭐ poc and simple script designed for reversing the ciphertext found at /blink/input of the api server in blink1control2 installations versions =2.2.7. the exploit - CVE-2022-35513 ❗ the blink1control2 app utilises weak password encryption and an insecure method of storage whic...