CVE-2021-29447-Authenticated-XXE-WordPress-5.6-5.7

CVE-2021-29447 Authenticated XXE Exploit for WordPress 🎯 A Python PoC to exploit the authenticated XXE vulnerability CVE-2021-29447 in WordPress versions 5.6–5.7 via WAV metadata. It abuses the iXML chunk in WAV files to trigger an Out-of-Band OOB exfiltration of sensitive data—like /etc/passwd,...

CVE-2022-42889

CVE-2022-42889-POC Una aplicación de demostración simple que muestra cómo explotar la vulnerabilidad CVE-2022-42889. Utiliza servicios OOB Fuera de Banda para demostrar los prefijos dns y url. JavaDocs para la interpolación de commons-text commons-text JavaDocs Ejemplos de interpolaciones...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Metasploit Module CVE-2025-55182 BETA A robus...

CVE-2021-21250

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is processed by XmlBuildSpecMigrator.migratebuildSpecString; which processes the XML document withou...