CVE-2024-31982

CVE-2024-31982 Java SSTI - Lead to RCE async async=falsegroovyprintln"Successful Injection"/groovy/ GET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28%22Successful%20Injection%22%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2F HTTP/1.1...

CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - Unauthenticated Arbitrary SQL Execution to Remote Code Execution CVE-2024-43918 The WBW Product Table Pro plugin for WordPress is vulnerable to unauthorized arbitrary SQL Execution due to a missing capability check on a function in all versions up to, and...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch exploitation and patch video: https://www.youtube.com/watch?v=XU-U4K270Z4 Qihoo 360 blog post...

CVE-2017-17562

CVE-2017-17562 RCE en servidor web GoAhead 2.5 3.6.5 Exploit independiente de reverse shell en Python 3 para CVE-2017-17562, funciona en versiones del servidor web GoAhead 2.5 3.6.5. Blog artículo aquí. Escrito y probado en Python 3.7 basado en POC y entorno vulnerable aquí. Parte del código toma...

log4j_checker_beta

log4jcheckerbeta - Linux, macOS and Windows Scripts If you want to use the windows/linux download cradles below, please review the scripts beforehand. Loading code from the internet and execute it is what brought us here with Log4Shell - right? ;- Linux and macOS servers or clients The...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch video de explotación y parche: https://www.youtube.com/watch?v=XU-U4K270Z4 Entrada de blog de Qihoo 360...

CVE-2021-44228

CVE-2021-44228 Ejecución remota de código en Apache Log4j todas las versiones de log4j-core =2.0-beta9 y =2.14.1 La versión 1.x tiene otras vulnerabilidades; se recomienda actualizar a la última versión. Avisos/boletines de seguridad relacionados con Log4Shell CVE-2021-44228 Uso: Descargue este...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

CVE-2020-14871-Exploit

CVE 2020-14871 Solaris exploit This is a basic ROP based exploit for CVE 2020-14871. CVE 2020-14871 is a vulnerability in Sun Solaris systems. The actual vulnerability is a classic stack-based buffer overflow located in the PAM parseusername function. It can be reached by manipulating SSH client...

Analysis-And-POC-N8N-CVE-2025-68613

Overview n8n and CVE-2025-68613 n8n is a workflow automation platform used to integrate systems and services through visual flows and JavaScript expressions. CVE-2025-68613 is a critical Remote Code Execution RCE vulnerability, with CVSS 9.9 , affecting multiple versions of n8n. The flaw occurs i...

CVE-2024-51378

CVE-2024-51378 — Resumen, Mitigación y Documentación Repositorio Seguro ⚠️ Advertencia ética y legal Todo el material en este repositorio es únicamente con fines educativos, de investigación de seguridad legítima y pruebas en entornos que posees o para los que tienes permiso explícito. No ejecutes...

CVE-2022-44877-RCE

This repository does not have a README...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 Stack-Based Overflow to Remote-Code Execution via execution-flow hijacking & multiple-register manipulation exploitation; CVEs are: CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 Marked as N1 - N7 rop.py make sure you hosted...

CVE-2017-9822

CVE-2017-9822 DotNetNuke often abbreviated as DNN is a CMS Content Management System platform and web application framework based on Microsoft's ASP.NET technology. Key Information Affected Product: DotNetNuke DNN Platform – a popular .NET CMS/portal. Disclosure Date: July 2017. Severity: Critica...

poc_CVE-2025-68613

PoC: n8n Sandbox Escape CVE-2025-68613 Educational Purposes Only This Proof of Concept demonstrates a critical vulnerability CVE-2025-68613 in n8n. Do not use this on systems you do not own or have explicit permission to test. Vulnerability Overview n8n versions prior to 1.122.0 contain a Remote...

CVE-2023-27372-PoC

This is a proof of concept CVE-2023-27372 SPIP RCE vulnerability. It's a deserilzation flaw which exploits the dangerous use of ENV tag during the reset password feature spip.php?page=spippass within /ecrire/balise/formulaire.php Specifically this line: 1. Syntax: python3 exploit.py -u...

Pluck-Exploitation-by-skdevils

Pluck-Exploitation-by-skdevils Exploit Title: Pluck CMS 4.7.16 - Remote Code Execution RCE Authenticated Date: 13.03.2022 Exploit Author: Ashish Koli Shikari Vendor Homepage: https://github.com/pluck-cms/pluck Version: 4.7.16 Tested on Ubuntu 20.04.3 LTS CVE: CVE-2022-26965...

CVE-2025-14174-Poc

CVE-2025-14174 PoC Exploit Overview This repository contains a fully functional Proof-of-Concept PoC exploit for CVE-2025-14174 also tracked as EUVD-2025-203113, a critical memory corruption vulnerability in the ANGLE graphics engine. The flaw stems from improper restriction of operations within...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...