CVE-2023-46604

CVE-2023-46604 Exploit for CVE-2023-46604 This tool helps to exploit this vulnerability. Shodan Query to find target: product:"ActiveMQ" port:"61616" Tools Usage: for read targets from the file: python3 exploit.py -f targets -c http://YourVPS/poc.xml --- single target: python3 exploit.py -ip IP -...

React2Shell

React2Shell — Vulnerable Lab CVE-2025-55182 React2Shell is an intentionally vulnerable React.js application provided for educational and research related to CVE-2025-55182. It contains deliberately insecure code and must not be used in production. The project is packaged and run using Docker,...

CVE-2026-11399

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

EUVD-2026-91917

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-11399 Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

secure-by-default-rce-demo

Node.js RCE Mitigation: DevOps as the Last Line of Defense This project demonstrates a critical Remote Code Execution RCE vulnerability in a Next.js application specifically via Server Actions and how infrastructure hardening effectively neutralizes the attack even when the code vulnerability...

Anyscale Ray - Remote Code Execution

Anyscale Ray 2.6.3 and 2.8.0 contain a remote code execution vulnerability due to insecure job submission API, allowing attackers to execute arbitrary code remotely if they have network access to the Ray Dashboard API. id: CVE-2023-48022 info: name: Anyscale Ray - Remote Code Execution author:...

CVE-2017-7525-Jackson-Deserialization-Lab

CVE-2017-7525 Laboratorio de Deserialización Insegura en Java Aplicación Java REST básica vulnerable a Deserialización Insegura, que conduce a RCE. El proyecto debe ejecutarse en Java 8u45 Basado en Maven con las siguientes dependencias: jackson-databind 2.2.2 commons-collections 3.1...

Linux Distros Unpatched Vulnerability : CVE-2026-85086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache...

Linux Distros Unpatched Vulnerability : CVE-2026-85494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value,...

Roundcube-CVE-2025-49113

Exploit RCE de Roundcube CVE-2025-49113 Un exploit de prueba de concepto totalmente funcional para CVE-2025-49113 🧠 Resumen CVE-2025-49113 es un La vulnerabilidad es el resultado de un fallo lógico en el analizador de sesiones de la aplicación, que permite la deserialización insegura de objetos...

psexec_noinstall

psexecnoinstall The repository contains psexec, which will help to exploit the forgotten pipe Have a non-genius administrator connect using PsExec to the host: We discovered this when we saw the RemComCommunication bundle. This one is standard for PsExec Using psexecnoinstall, it is possible to...

CVE-2020-8635

¿Qué es esto? Wing FTP Server 6.2.3 - Escalada de Privilegios Exploit Introducción Wing FTP Server v6.2.3 para Linux, macOS y Solaris establece permisos inseguros en los directorios de instalación y archivos de configuración. Esto permite a los usuarios locales crear arbitrariamente usuarios FTP...

CVE-2025-55182-POC

CVE-2025-55182 POC & Detección Colección de herramientas de explotación y detección de la vulnerabilidad de deserialización insegura de React Server Components RSC Información de la vulnerabilidad CVE-ID : CVE-2025-55182 Versiones afectadas : React 19.x, Next.js 15.x/16.x usando App Router Vector...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT.yaml Parsing Severity: High, CVSS 4.0 8.7 , CVSS 3.1 8.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected:...

WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Arbitrary Ticket Response Deletion vulnerability discovered by Saruul in WordPress Plugin Helpdesk Support Ticket System for WooCommerce versions = 2.1.6...

CVE-2025-15276-poc

CVE-2025-15276: Deserialización Insegura de PickledData en FontForge SFD RCE Descargo de responsabilidad Esta Prueba de Concepto PoC es únicamente para fines educativos y auditoría de seguridad. El autor no se responsabiliza por el mal uso de esta información. El acceso no autorizado a sistemas...

CVE-2026-93399

CVE-2026-93399 — Bookly IDOR order token disclosure & booking rollback Python 3 PoC for CVE-2026-93399 in Bookly bookly-responsive-appointment-booking-tool. Description PoCbit / GitHub CVE-2026-93399 — Bookly ≤ 28.2 suffers from Insecure Direct Object Reference CWE-639 on public booking AJAX:...

DEBIAN-CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85086

Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...