CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider OAuth Auth Bypass → DAG RCE Authentication bypass in Apache Airflow's FAB auth-manager provider apache-airflow-providers-fab, leading to remote code execution via a triggered DAG. The provider decodes the Azure OAuthidtoken with signature verification...

CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE Remote code execution PoC for the Gitea diffpatch endpoint. An account with write access to a repository on instances with open registration, simply registering an account suffices can execute arbitrary shell commands on the server as the Gitea service account...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – Malicious PyPI Package Install Hook setup.py Execution Program Code Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg', version='1.0',...

CVE-2026-67340_exploit

CVE-2026-67340 — ArcadeDB JAVASCRIPT Trigger-Script RCE post-auth Post-authentication remote code execution in ArcadeDB a Java multi-model database via a JAVASCRIPT trigger that reaches host classes. A trigger's GraalVM polyglot engine is built with a host-class allow-list that includes java.lang...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Redis UAF Proof of Concept Use-After-Free in RedisunblockClientOnKey leading to Remote Code Execution Proof of concept with GDB‑assisted exploitation educational / lab use only 📖 Overview CVE-2026-23479 is a critical Use‑After‑Free UAF vulnerability in Redis versions 7.2.0...

CVE-2025-49844

CVE-2025-49844 – Redis Lua Parser Use-After-Free Lua chunk-name GC race leading to Redis 8.2.1 use-after-free and remote code execution. Overview Redis embeds Lua 5.1 for scripting. In versions up to 8.2.1 the luaYparser function does NOT anchor the chunk name string on the Lua stack before...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook Program Code Lua + Python trigger -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" local a = 1 end...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection → post-index-change → Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2026-13714 — WPL Real Estate Unauthenticated RCE Realtyna Organic IDX plugin + WPL Real Estate for WordPress 5.3.0 Unauthenticated arbitrary file upload via...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL Injection → PostgreSQL-superuser RCE SQL injection in the myInAppChannels:list action of NocoBase's @nocobase/plugin-notification-in-app-message ≤ 2.0.60. The filterlatestMsgReceiveTimestamp$lt request parameter is interpolated directly into a raw Sequelize.literal S...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – MQTT Broker CONNECT Packet Heap Overflow Program Code C + Python // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length field misinterpreted ;...

log4shell

Log4Shell CVE-2021-44228 — Research Report A self-contained technical report on Log4Shell , the critical Remote Code Execution vulnerability in Apache Log4j 2 disclosed in December 2021. Covers root cause analysis, the full attack chain, detection/mitigation guidance, and an end-to-end exploit...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ Overview CVE-2026-16723 is a Remote Code Execution RCE vulnerability in Fastjson 1.x 1.2.68 – 1.2.83. When Fastjson parses attacker-controlled JSON, a crafted @type value is turned into a class-resource lookup inside...

wonderplugin

Wonderplugin For RCE DONT USE THIS FAKE PLUGIN ON YOUR PRODUCTION WEB SERVER! This repository purposed for test a vulnerability on wonderCMS, this fake plugin contain backdoor web shell, you can find it on evil.php file. Related Article WonderCMS 3.1.3 - Authenticated RCE & Blind SSRF Vulnerabili...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...

webcgi-exploits

Web CGI Exploits Here's several exploits related to different web CGIs. I wrote those exploits in last few years. How it works Web app are basicly those layers: 1. applications 2. web frameworks 3. script language engines 4. web containersservers 5. web front proxynginx etc. 4 and 5 could be the...

rogue-jndi

Rogue JNDI Ein bösartiger LDAP-Server für JNDI-Injection-Angriffe. Beschreibung Das Projekt enthält LDAP- und HTTP-Server zum Ausnutzen der standardmäßig unsicheren Java-JNDI-API. Um einen Angriff durchzuführen, kannst du diese Server lokal starten und dann eine JNDI-Auflösung auf dem verwundbare...

Pluck-CMS-Pluck-4.7.16-Theme-Upload-Remote-Code-Execution-Authenticated--POC

Pluck-CMS-Pluck-4.7.16-Theme-Upload-Remote-Code-Execution-Authenticated-POC Exploit Author: Ashish Koli Shikari Vendor Homepage: https://github.com/pluck-cms/pluck Version: 4.7.16 CVE: CVE-2022-26965 About this: This script uploads shell.tar to the PluckCMS. An application will untar the package...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated- Remote Code Execution RCE Exploit Author: Ashish Koli Shikari Vendor Homepage: https://thedigitalcraft.com/ Software Link: https://github.com/thedigicraft/Atom.CMS Version: 2.0 CVE: CVE-2022-25487 About this: This script uploads...