CVE-2025-2945

CVE-2025-2945 - pgAdmin4 Authenticated RCE Exploit Author: G0D150NE Version: 2.0.0 CVE: CVE-2025-2945 Severity: Critical CVSS 9.9 📌 Description Exploit for pgAdmin4 Remote Code Execution RCE vulnerability affecting versions 8.10 to 9.1. The vulnerability exists in the /sqleditor/querytool/downloa...

CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-The-Silent-Gateway-Risk Letting attackers run malicious code without needing a cracked password, user interaction, or even a foothold in your network. That’s CVE-2025-27480 It’s late you are running on red-bull we have all been there. You’re troubleshooting a production issue and...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre-Auth RCE Chain SolarWinds Web Help Desk Pre-Auth RCE Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if SolarWinds Web Help Desk instance is vulnerable to CVE-2025-40552 and CVE-2025-4055...

CVE-2026-9082

CVE-2026-9082 Unauthenticated SQL injection in Drupal Core on PostgreSQL via POST /user/login, escalated to remote code execution through PostgreSQL sessionpreloadlibraries. Unlike existing public exploits that target JSON:API, this uses the login endpoint — always available, no modules or...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi bypass de parche Solo para uso en entornos controlados y propios. No usar contra sistemas sin autorización. Descripción PoC desarrollada para demostrar CVE-2021-42013 , presente en Apache HTTP Server 2.4.50. Este CVE es el bypass del parche qu...

Zena-CVE-2021-45026

Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC Process: Logs into Zena's webconfig page using default credentials Drops Stored XSS...

MOVEit-Exploit

Exploit MOVEit un exploit de prueba de concepto POC para CVE-2023-34362 que afecta a MOVEit Transfer Nota: Este proyecto está finalizado... Nuestra página de Instagram . Nuestro canal de YouTube . Nuestra página de Twitter CVE-2023-34362 POC para CVE-2023-34362 que afecta a MOVEit Transfer Aviso...

CVE-2026-4883

CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 A Python Proof of Concept for CVE-2018-7600 , also known as Drupalgeddon2. CVE-2018-7600 is a critical vulnerability affecting certain versions of Drupal 7. Under vulnerable configurations, an unauthenticated attacker may be able to inject malicious input and achieve remote...

CVE-2025-53690-POC

Sitecore Critical Deserialization RCE CVE-2025-53690 POC and Nuclei Template Short summary This repository hosts a detection template and supporting materials for CVE-2025-53690 Sitecore. The included Nuclei template helps scan for Sitecore instances that appear to be configured in a way that cou...

CVE-2026-1357

🧨 CVE-2026-1357 – WPvivid Null-Key Exploit Tool CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerability: Unauthenticated Arbitrary File Upload → Remote Code Execution CVE: CVE-2026-1357 – CVSS 9.8 Critical GitHub: https://github.com/Nxploited Telegram:...

CVE-2025-13486-POC

CVE-2025-13486 Proof of Concept A Proof of Concept PoC exploit for CVE-2025-13486, a Remote Code Execution vulnerability in the Advanced Custom Fields: Extended ACFE WordPress plugin. Vulnerability Overview This vulnerability exists in ACFE versions 0.9.0.5 through 0.9.1.1, allowing unauthenticat...

cve-2025-29384

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

prefect-cve-2026-5366

PoC: CVE-2026-5366 - Git Argument Injection in Prefect GitRepository Vulnerability: git argument injection leading to RCE via commitsha plus argument injection via directories Version: vulnerable in 3.6.23, fixed in 3.6.25+ File: src/prefect/runner/storage.py Huntr:...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Implementación de Impacket del PoC de PrintNightmare creado originalmente por Zhiniang Peng @edwardzpeng y Xuefeng Li @lxf02942370 Probado en un controlador de dominio 2019 completamente parcheado Ejecutar DLL maliciosas de forma remota o local Actualización de parc...

CVE-2021-3129-Lab

CVE-2021-3129: Laravel Debug Mode RCE Lab Hands-on lab for exploiting CVE-2021-3129 - a critical Laravel vulnerability allowing unauthenticated file read and potential RCE. Quick Start root@kitploit: Clone git clone https://github.com/theNareshofficial/CVE-2021-3129-Lab.git cd CVE-2021-3129-Lab...

CVE-2026-45829

🚨 CVE-2026-45829 - ChromaDB Pre-Auth RCE Critical Remote Code Execution in ChromaDB Vector Database 📌 Overview CVE-2026-45829 is a critical pre-authentication Remote Code Execution vulnerability in ChromaDB , a popular open-source AI Vector Database. An unauthenticated attacker can exploit the wa...

CVE-2025-55182-React2Shell

CVE-2025-55182-React2Shell xpl0ited by infrar3d A 10.0 critical severity vulnerablility affecting server-side use of React.js, tracked as CVE-2025-55182 in React.js and CVE-2025-66478 specifically for the Next.js framework. This vulnerability was responsibly disclosed by Lachlan Davidson on 29...

cve-2010-2075-analysis

CVE-2010-2075 – Backdoor de Ejecución Remota de Código en UnrealIRCd Resumen Este repositorio documenta el análisis y la explotación de CVE-2010-2075, una vulnerabilidad de backdoor que afecta a UnrealIRCd 3.2.8.1. La vulnerabilidad se reprodujo en un entorno de laboratorio controlado utilizando...