271208 matches found
ListSERV Maestro <= 9.0-8 RCE
A struts-based OGNL remote code execution vulnerability exists in ListSERV Maestro before and including version 9.0-8. id: CVE-2010-1870 info: name: ListSERV Maestro = 9.0-8 RCE author: b0yd severity: medium description: A struts-based OGNL remote code execution vulnerability exists in ListSERV...
pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...
D-Link DNS-320 - Remote Code Execution
The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...
mongo-express Remote Code Execution
mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...
Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE
Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...
Apache Axis2 Default Login
Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service. id: CVE-2010-02...
Rudder Server < 1.3.0-rc.1 - SQL Injection
Rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default. Version...
CVE-2025-7775
CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server OR NetScaler ADC and NetScaler Gateway 13.1,...
CVE-2025-12674
CVE-2025-12674 KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload ๐ KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload ๐ Description The KiotViet Sync plugin for WordPress versions up to and including 1.8.5 is vulnerable to arbitrary file uploads, due to missing file type...
CVE-2025-55182-React2Shell-RCE-POC
CVE-2025-55182 - React2Shell RCE This repository documents research into CVE-2025-55182, also known as React2Shell, a critical unsafe deserialization vulnerability in React Server Components RSC and frameworks that embed the RSC Flight protocol, especially Next.js App Router. The focus here is on...
SSP-Assignment-3-RCEYouLater
CVE-2023-46604: Apache ActiveMQ RCE Proof of Concept Assignment: SSP Assignment 3 Team: RCE You Later Members: Banica Horia Alexandru, Comarlau Vlad-Constantin Video link of using the repo to do the PoC:https://www.youtube.com/watch?v=vum4qTF4ygU ๐จ Overview This repository contains a fully...
sk-cve-2026-26030-lab
CVE-2026-26030 โ Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...
CVE-2023-21716-Analysis-ICT287
CVE-2023-21716 Analysis-ICT287: Microsoft Word Remote Code Execution Overview This repository documents the analysis and reproduction of CVE-2023-21716, a heap-based buffer overflow vulnerability in Microsoft Word's RTF parser with a CVSS score of 9.8 Critical. What's Inside File| Description...
CVE-2026-5203
CVE-2026-5203 โ CMS Made Simple โค 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple โค 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator to upload arbitrary files e.g. PHP web shells...
CVE-2026-4480-POC
CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...
CVE-2026-6815
CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal & Arbitrary File Write Authenticated This repository contains a Proof of Concept PoC exploit for CVE-2026-6815, an arbitrary file write and path traversal vulnerability in Casdoor. The vulnerability has been fixed in version 3.54.1...
connectwise-screenconnect_auth-bypass-add-user-poc
CVE-2024-1708 ๅ CVE-2024-1709 ็ฑ @watchTowr ๅผๅ็ๆฆๅฟต้ช่ฏ๏ผPoC๏ผ๏ผๅฉ็จ่บซไปฝ้ช่ฏ็ป่ฟๆผๆดๅจ ConnectWise ScreenConnect ไธญๆทปๅ ๆฐ็็ฎก็็จๆทใ่ฟๆฏ็ฎๅ็่ฟ็จๅฝไปคๆง่ก้พ็็ฌฌไธๆญฅใ ๅ ณๆณจ watchTowr ๅฎ้ชๅฎคๅข้๏ผ่ทๅๆไปฌ็ๅฎๅ จ็ ็ฉถ https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...
Noregressh
Originally I wanted to build a regreSHHion scanner and exploiter. I then added additional CVEs to it. If anyone can help me expand parts of the project, please get in touch. WELCOME TO NOREGRESSH Norregressh is a penetration-testing framework focused on OpenSSH regressions and multiple CVEs. It...
CVE-2025-49132-poc
CVE-2025-49132-poc I made this poc for CVE-2025-49132, as it was interesting to make and it's part of a challenge over at my cyber platform deepreview ! This CVE takes advantage of a file inclusion vulnerability that can be escalated to a Remote Code Execution with the pearcmd.php script. This is...
CVE-2025-55182-Exploiter
๐ก๏ธ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit ๐ฅ Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities โ especially CVE-2025-55182 RSC Deserialization RCE. โ ...