CVE-2026-114219

The NT OneAPP application developed by NewType Infortech is susceptible to a Hard-coded Credentials vulnerability (CWE-798). Unauthenticated remote attackers can retrieve the hard-coded cryptographic key to decrypt login request contents. This allows attackers to obtain users' plaintext account c...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Critical Remote Authentication Bypass in GNU Inetutils telnetd The ghost of 2015 just came back to own everything still running telnet. Zero authentication. One environment variable. Instant root shell. ⚠️ Overview CVE-2026-24061 is a critical remote privilege...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd Critical Stack-Based Buffer Overflow in OpenWrt odhcpd A remote unauthenticated stack-based buffer overflow allowing potentialRemote Code Execution RCE with root privileges. 📖 Overview Property| Value ---|--- CVE ID| CVE-2026-53921 Severity| 🔴 Critical CVSS v3.1| 9.8 CWE...

next.js-scanner

next.js-scanner Detection scanner for CVE-2025-55182 React Server Component Remote Code Execution Vulnerability...

CVE-2026-50751

🚨 CVE-2026-50751 - Authentication Bypass in Check Point VPN IKEv1 📖 Overview CVE-2026-50751 is a critical authentication bypass vulnerability affecting Check Point Quantum Security Gateway deployments configured with the legacy IKEv1 Remote Access VPN protocol. The flaw allows an unauthenticated...

OpenSMTPD-CVE-2020-7247-

OpenSMTPD Remote Command Execution Vulnerability CVE-2020-7247 WHS 4th Park Solmin Original link: https://github.com/vulhub/vulhub/blob/43eae7170d09e7748c3aac64cd6a8e5af508a8ef/opensmtpd/CVE-2020-7247/README.md Overview OpenSMTPD is an SMTP server program used on Unix-like operating systems. It c...

Solar-exploiting-log-4j

🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...

CVE-2026-82222

CVE-2026-82222 — GiveWP Author: Rx019 CVSS: 10.0 Critical Type: Unauthenticated PHP Object Injection → Remote Code Execution Plugin: GiveWP give — Donation Plugin and Fundraising Platform Affected: Patched: 4.16.8 Description GiveWP stores a donor's lastname in the PHP session without sanitizatio...

cve-2025-20333

CVE-2025-20333 - Complete Research & Exploitation Toolkit Overview This directory contains comprehensive research, analysis, and proof-of-concept code for CVE-2025-20333 , a critical stack buffer overflow vulnerability in Cisco ASA/FTD WebVPN servers. Status: ⚠️ Actively exploited in the wild...

CVE-2025-55182-React-RSC-Exploit

CVE-2025-55182 // REACT SERVER COMPONENTS RCE OVERVIEW Exploit PoC for CVE-2025-55182. Targets unsafe versions and input validation functions vulnerabilities in React Server Components. TECHNICAL MECHANISM Vector : Prototype pollution via $1:proto :then during hydration. Payload : RCE via...

WP-CVE-2025-4322---Scan

Usage Normal Test python3 wp-backdoor-remote-scan.py https://misitio.com with JSON output python3 wp-backdoor-remote-scan.py https://misitio.com --json Adjust threads and timeout for rate-limited sites python3 wp-backdoor-remote-scan.py https://misitio.com --threads 5 --timeout 15...

CVE-2025-55182-MassPayloadAttack

CVE-2025-55182 Mass Payload Attack React2Shell A modified Mass RCE Exploit script for CVE-2025-55182 React2Shell targeting Next.js applications. This tool is a modification of the original PoC script by pax-k. While the original script targets a single host, this version is enhanced to support ma...

log4shell-poc

CVE-2021-44228 Log4Shell POC Overview Proof of Concept for Remote Code Execution via JNDI Injection vulnerability in Apache Log4j 2.14.1. Web Hacking Course - Week 11 Assignment. Environment Role| Software| Version ---|---|--- Victim Server| Spring Boot + Log4j| 2.6.1 + 2.14.1 Victim JDK| OpenJDK...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit Username Map Script This repository contains a Python script designed to automate the exploitation of the CVE-2007-2447 vulnerability on Samba servers versions 3.0.20 to 3.0.25rc3. This tool has been developed for strictly educational purposes and authorized penetratio...

CVE-2024-39700-PoC

CVE-2024-39700 Proof of Concept Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Action Result:...

CVE-2025-56819

CVE-2025-56819 An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter. POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type": "JDBC",...

CVE-2026-4480

🚨 CVE-2026-4480 - Critical Remote Code Execution in Samba Printing Subsystem Remote Code Execution RCE Samba Print Command Injection Vulnerability "A single print job name should never become a shell command." 📖 Overview CVE-2026-4480 is a critical command injection vulnerability affecting Samba'...

Flowise-CVE-2025-58434-Chain-59528

FlowiseAI CVE Chain - ATO CVE-2025-58434 and RCE CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents This repository contains a Python proof-of-concept for chainin...

CVE-2026-34197

CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...