CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container — using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...

wp2shell-lab

mini-wp-rest A compact, dependency-free reimplementation of a small slice of WordPress's REST API — just enough to serve a public posts collection and run several sub-requests in one round trip. Handy for teaching how WordPress routing, WPQuery, and $wpdb fit together without pulling in all of...

CVE-2026-23550

🧨 CVE-2026-23550 – Modular Connector Admin Bypass Unauthenticated WordPress Admin Login viaorigin=mo Parameter Modular Connector Plugin ≤ 2.5.1 📖 Description The Modular Connector plugin for WordPress versions ≤ 2.5.1 contains a critical authentication bypass vulnerability. An unauthenticated...

westone-CVE-2020-17519-scanner

westone-CVE-2020-17519-scanner Apache Flink 1.11.0、1.11.1、1.11.2 Hackers can read/write remote files via REST API Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2020-17519-scanner.git cd westone-CVE-2020-17519-scanner cmd CVE-2020-17519.exe...

CVE-2022-1388

CVE-2022-1388 https://support.f5.com/csp/article/K23605346 This vulnerability may allow an unauthenticated attacker to gain network access to BIG-IP systems through the management port and/or their own IP addresses to execute arbitrary system commands, create or delete files, or disable services...

CVE-2021-22986

CVE-2021-22986 This vulnerability allows for unauthenticated attackers with network access to the iControl REST interface, through the BIG-IP management interface and self IP addresses, to execute arbitrary system commands, create or delete files, and disable services. This vulnerability can only...

CVE-2026-94215: Missing Authorization

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs because the API uses a per-request in-memory cache to resolve clients by their unique identifier without verifying if the client belongs to the realm specified in the reque...

The vulnerability of the Karapace interface for Kafka REST, related to bypassing the authentication process by using an alternative path or channel, allows attackers to circumvent existing security restrictions and gain read-write access to data.

The vulnerability of the Karapace interface for Kafka REST relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain read-write access to data...

CVE-2025-43990-Magento-RCE

Magento APSB25-94 — Carga de archivo no autenticada a RCE Resumen Explota la carga de archivos no autenticada en Magento / Adobe Commerce a través de la carga de archivos customoptions del carrito de invitado de la API REST. Cadena de ataque root@kitploit: 1. GraphQL → leak product SKU 2. REST AP...

WP2Shell-Scanner

WP2Shell Scanner A command line tool that checks whether a WordPress site is exposed to WP2Shell CVE-2026-63030 and CVE-2026-60137. It reads the WordPress version and REST API surface over read-only requests and reports a verdict. It does not exploit anything. !WARNING For authorised testing only...

CVE-2026-9830

CVE-2026-9830 BookingPress Pro API Assessment PoC This repository contains a Python proof of concept for validating a reported unauthenticated BookingPress Pro REST API exposure. A successful response may contain booking and customer information, which can include personal data. Authorization...

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket Remote Command Execution RCE Technical Analysis & Laboratory Exploitation of Null-Byte Argument Injection Vulnerability Summary CVE-2022-36804 is a high/critical Argument Injection vulnerability within the REST API of Atlassian Bitbucket Server and Data Center. While the...

struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 XML Deserialization RCE This repository demonstrates exploitation of Apache Struts S2-052 CVE-2017-9805 using malicious XML deserialization. The exploit was developed while solving the INE eWPTX Practice Range – Struts XML Deserialization RCE lab. Vulnerability Overview Apach...

CVE-2024-9707

CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the...

CVE-2023-28121-WordPress-Privilege-Escalation

🔐 CVE-2023-28121 — WordPress Privilege Escalation Practical exploitation of a critical vulnerability in WordPress using the WooCommerce Payments plugin. 📌 Summary CVE-2023-28121 allows creating administrator users without authentication via the REST API. Severity: Critical CVSS 9.8 Impact: Full...

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 3.0.8 - Inyección SQL no autenticada Descripción El plugin Collapsing Categories para WordPress es vulnerable a Inyección SQL a través del parámetro 'taxonomy' de la API REST /wp-json/collapsing-categories/v1/get en todas las versiones hasta la 3.0.8...

CVE-2024-2782-PoC

CVE-2024-2782-PoC CVE-2024-2782 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST A...

CVE-2024-2771-PoC

CVE-2024-2771-PoC CVE-2024-2771 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all...

spring-data-rest-CVE-2017-8046

image:https://spring.io/badges/spring-data-rest/ga.svgSpring Data REST, link="http://projects.spring.io/spring-data-rest/quick-start" image:https://spring.io/badges/spring-data-rest/snapshot.svgSpring Data REST, link="http://projects.spring.io/spring-data-rest/quick-start" = Spring Data REST The...

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP Unauthenticated RCE Vulnerability F5 BIG-IP iControl REST身份验证绕过RCE漏洞 fofa keywords: title="BIG-IP- Redirect" usage attack root@kitploit: $ python3 cve-2022-1388.py -t https://203.xxx.xxx.xxx + https://203.xxx.xxx.xxx is vulnerable input your command:...