CVE-2026-85015

The Unlimited Elements for Elementor WordPress plugin (versions before 2.0.21 ) is vulnerable to an authenticated arbitrary file write via path traversal. The flaw exists because the plugin fails to sanitize file paths within uploaded archives before extraction. This allows authenticated users wi...

EUVD-2026-91937

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with access to its asset-management feature Administrators by default, or Editors when a non-default Unlimited Elements fo...

scanner-for-CVE-2025-55182-vulnerability

🛡️ Escáner de Vulnerabilidades de GitHub para CVE-2025-55182 RCE en React/Next.js Este script de Python está diseñado para escanear todos tus repositorios públicos y privados de GitHub en busca de dependencias potencialmente vulnerables a CVE-2025-55182 una ejecución remota de código crítica que...

log4shell-test-exploit

Test exploit of CVE-2021-44228 log4shell Preparation Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git cd marshalsec m...

ProxyNotShell-PoC

Working PoC for CVE-2022-41040 and CVE-2022-41082 A.K.A ProxyNotShell Requirement: pip install requestsntlm2 requests Usage: python pocaug3.py Creds: ProxyShell PoC script from: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc's blog post...

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...

CVE-2025-55182

¿Qué es CVE-2025-55182? También conocido como React2Shell, es una vulnerabilidad causada por un defecto estructural en React Server Components que, al deserializar datos, produce una contaminación de prototipo prototype pollution permitiendo ejecutar RCE. Las versiones afectadas son: React 19.0.0...

CVE-2017-1000117

git-client-rce Este PoC es solo con fines educativos!!! Repositorio GIT de prueba para el PoC de git-client-rce CVE-2017-1000117 https://marc.info/?l=git&m=150238802328673&w=2 Este CVE afecta a todos los clientes de git v2.14.1 Ejecute lo siguiente en el sistema de prueba para ver el PoC : $git...

CVE-2025-52691

CVE-2025-52691 This repository contains a safe Proof of Concept PoC to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability. CVE-2025-52691 – SmarterMail Version Detection PoC 📌 Description This...

ENLBufferPwn

ENLBufferPwn CVE-2022-47949 CVE: | CVE-2022-47949 ---|--- CVSS v3.1: | 9.8/10 Critical Authors: | PabloMK7, Rambo6Glaz, Fishguy6564 Reported: | August 8th, 2021 Mario Kart 7 April 14th, 2022 for the impacted WiiU and Switch games Disclosed: | December 22nd, 2022 Table of contents Description...

ciscoasa_honeypot

Cisco ASA honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Contact: [email protected] A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability It is released under the MIT license for the use of the...

CVE-2019-0232

CVE-2019-0232 Descripción Esta es una herramienta que automatiza el flujo de trabajo de explotación para CVE‑2019‑0232 proporcionando tanto el modo de ejecución de comandos como el modo de shell inversa. Soporta codificación automática de URLs para comandos, inicia un servidor HTTP temporal para...

CVE-2026-55200

CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability Critical Pre-Authentication Memory Corruption Vulnerability in libssh2 Overview Field| Detail ---|--- CVE| CVE-2026-55200 CVSS| 9.2 Critical Type| Out-of-Bounds Write Component| libssh2 Affected Versions| = 1.11.1 Attack Vector...

wp2shell-poc-fulljs

WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...

confluence-rce-poc

confluence-rce-poc Setting up POC for CVE-2021-26084 Docker Feed official docker-entrypoint.sh to postgres, change db username and password as required...

CVE-2023-26469-Jorani

Herramienta de explotación de CVE-2023-26469 Resumen Esta es una herramienta de explotación PoC para la versión 1.0.0 de Jorani, que permite a un atacante lograr la ejecución remota de código mediante técnicas de path traversal e inyección de registros. ⚠️ Advertencia: Esta herramienta es solo par...

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

TryHack3M-Bricks-Heist

objetivo:10.201.6.98 enumeración nmap -A 10.201.6.98 ya que hay un wordpress con nombre "brick by brick" y el nombre de esta sala es brick, probablemente sea donde podemos encontrar la vulnerabilidad así que enumeremos wordpress wpscan --url https://bricks.thm --disable-tls-checks ejecutarlo con...

telerik-scanner-CVE-2019-18935

Escáner de Vulnerabilidad Telerik CVE-2019-18935 Un escáner de seguridad basado en Python diseñado para detectar la vulnerabilidad de Ejecución Remota de Código en Telerik UI para ASP.NET AJAX CVE-2019-18935. 🚨 Detalles de la Vulnerabilidad CVE : CVE-2019-18935 Nivel de Riesgo : ALTO CWE : CWE-91...

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ Overview CVE-2026-16723 is a Remote Code Execution RCE vulnerability in Fastjson 1.x 1.2.68 – 1.2.83. When Fastjson parses attacker-controlled JSON, a crafted @type value is turned into a class-resource lookup inside...