CVE-2026-65008

CVE-2026-65008 — Grav CMS 2.0.7 Authenticated RCE Proof-of-concept for CVE-2026-65008 : authenticated remote code execution in Grav CMS via unrestricted calluserfuncarray in Blueprint::dynamicData. A user with admin.pages or api.pages.write can plant a malicious form frontmatter. The payload then...

mvn_pwn

MVN PWN Malicious Maven pom.xml that uses "groovy-maven-plugin" to get RCE Full payload with dependencies can be found at the following blog: https://security.humanativaspa.it/abusing-mavens-pom-xml/...

CVE-2026-20841

CVE-2026-20841 PoC PoC of the "Windows Notepad RCE" vulnerability. Disclaimers 1. I am NOT the one who discovered this vulnerability. Props to the original authors listed on the official disclosure page. I just recreated the PoC according to the description. 2. I personally don't think this...

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — SiYuan MCP Unauthenticated Administrator Takeover Proof of Concept for CVE-2026-66012 CVSS 10.0 Critical, a missing-authorization vulnerability in SiYuan's MCP Model Context Protocol endpoint that allows an unauthenticated attacker to achieve administrator takeover and remote cod...

EXPLOIT-CVE-2026-40901

DataEase — Unauthenticated RCE via a 4-vulnerability chain CVE-2026-40901 & friends Auth bypass → JDBC blocklist bypass arbitrary file read → SQL injection → Java deserialization in Quartz → remote code execution asroot. Self-contained local lab Docker + working PoC. Fixed in DataEase v2.10.21...

CVE-2026-2898-FunAdmin-Deserialization

CVE-2026-2898 - FunAdmin Insecure Deserialization Summary FunAdmin Disclaimer For educational and authorized testing only...

CVE-2026-1357

🧨 CVE-2026-1357 – WPvivid Null-Key Exploit Tool CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerability: Unauthenticated Arbitrary File Upload → Remote Code Execution CVE: CVE-2026-1357 – CVSS 9.8 Critical GitHub: https://github.com/Nxploited Telegram:...

CVE-2025-48148

CVE-2025-48148 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload 🚀 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload Exploit 📝 Description The StoreKeeper for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to...

CVE-2026-0770

CVE-2026-0770 Overview This tool is used to test the vulnerability CVE-2026-0770 in the Langflow application. It leverages the /api/v1/validate/code endpoint to perform Remote Code Execution RCE. Developer: Ohang Thanks to: @C4p333 Purpose: Security Research & Educational Use Installation Termux...

CVE-2025-69516

CVE-2025-69516 - Tactical RMM Remote Code Execution This repository contains a Python script that automates the exploitation of the CVE-2025-69516 SSTI vulnerability in Tactical RMM. It has been tested on version 1.3.1. Usage python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id" Links...

CVE-2026-Termius

Termius macOS Application Vulnerability Report CVE-2026-Termius Target : Termius macOS Version Tested : Latest as of Jan 2026 Impact : Remote Code Execution RCE, Local Privilege Escalation LPE, App Security Bypass 🚨 Executive Summary Three critical vulnerabilities were identified in the Termius...

CVE-2026-25512

CVE-2026-25512: Remote Code Execution via Command Injection in TNEF Handler - Group-Office CVSS 4.0 Vector : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Table of Contents Summary Affected Versions Technical Details Root Cause Source to Sink Flow Exploitation Automated Exploit...

React2Shell-Exploit-CVE-2025-55182

💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗ █████╗ ██████╗████████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔══██╗██╔════╝╚══██╔══╝╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝█████╗ ███████║██║ ██║ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔══██╗██╔══╝ ██╔══██║██║ ██║...

CVE-2026-39387

CVE-2026-39387 — BoidCMS Authenticated File Upload to RCE via Template Injection Description BoidCMS -l -p Arguments Flag| Description| Example ---|---|--- -u, --url| Base URL of the target BoidCMS site| http://target.com -l, --user| Admin username| admin -p, --passwd| Admin password| password123...

CVE-2026-40175

🚨 CVE-2026-40175 - Critical Vulnerability in Axios Prototype Pollution Gadget → Remote Code Execution & Cloud Compromise 📢 Overview Axios — one of the most popular HTTP clients for JavaScript browser & Node.js — contains a critical vulnerability prior to version 1.15.0. A specific "gadget" attack...

cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE Field| Value ---|--- CVE ID| CVE-2025-43564 CVSS Score| 9.8 CRITICAL Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-494 — Download of Code Without Integrity Check Exploitation| Confirmed in the wild within one week of disclosur...

selenium-node-takeover-kit

Metasploit Exploits This project has moved. To get the latest version, pull from https://codeberg.org/JonStratton/selenium-node-takeover-kit This combines some of the examples below to upload files to, download files from, and execute code on a Selenium node via the “COMMANDTYPE” param. RCE...

CVE-2026-0300

🚨 CVE-2026-0300 - Critical Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Buffer Overflow in User-ID™ Authentication Portal Captive Portal — Actively Exploited in the Wild 📋 Overview A critical buffer overflow vulnerability CWE-787 in the User-ID Authentication Portal of PAN-O...

DOLIBARR-RCE-CVE-2026-22666

This repository does not have a README...

CVE-2026-22692

CVE-2026-22692: Critical Twig Sandbox Bypass via collect-mapInto allowing RCE/LFI/XXE October CMS Overview Field| Details ---|--- CVE ID| CVE-2026-22692 Severity| Moderate CVSS:3.1 4.9 Advisory| GHSA-m5qg-jc75-4jp6 Affected Product| October CMS RCE, LFI, XXE Discovered by| Lukasz Rybak CWE...