1201121 matches found
EUVD-2026-111423
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
EUVD-2026-111431
Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-111398
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2021-32099
CVE-2021-32099 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2021-32099 vulnerability, affecting Pandora FMS 742. The exploit shows how an unauthenticated attacker can leverage a SQL injection vulnerability to escalate an unprivileged session to an administrator-level...
CVE-2026-34197-Lab
CVE-2026-34197 — Apache ActiveMQ Classic Jolokia RCE Lab Overview This repository is a local Docker lab for studying CVE-2026-34197 , an Apache ActiveMQ Classic remote code execution issue reachable through the Jolokia JMX-HTTP API. The lab compares two ActiveMQ Classic instances side by side:...
fix_nginx_cve_2026_42945
NGINX CVE-2026-42945 One-Click Fix Script Automatically detect OS distribution, upgrade NGINX to the fixed version ≥1.30.1, backup configuration, and auto-rollback. Vulnerability Description Vulnerability ID: CVE-2026-42945 Vulnerability Name: NGINX Rift When NGINX processes specific rewrite...
SQLPad-6.10.0-Exploit-CVE-2022-0944
SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploits an RCE vulnerability in SQLPad 6.10.0, allowing an attacker to achieve remote code execution RCE by abusing the host and database fields in SQLPad’s MySQL database connection settings. The exploit leverages SQLPad’s unsanitized handlin...
CVE-2020-13671-old
CVE-2020-13671 RCE via File Upload — Drupal Core Software: Drupal Core 8.7.5 Affected: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type CISA KEV: Yes — Known Exploited Vulnerability Advisory: SA-CORE-2020-012 What is Drup...
printix-CVE-2022-29553
CVE-2022-29553 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" or "Use of Hard-coded, Security-relevant Constants" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attack...
K000164026: Next.JS vulnerability GHSA-673q-mjm6-r5xr
Security Advisory Description A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a use cache function that returns multiple typed arrays. GHSA-673q-mjm6-r5xr Impact There is no impact; F5 products are not affected...
Tor-0day-JavaScript-Exploit
CVE-2024-9680 - TOR Browser 0day Exploit UAF Use-After-Free in Animation Timelines - Remote Code Execution Vulnerability Actively exploited in the wild targeting Tor Browser users View Analysis • Official CVE Overview This repository contains a comprehensive analysis and educational demonstration...
CVE-2026-23744
CVE-2026-23744 Exploit to MCPJam Inspector Install libraries with: pip install -r requirements.txt - use python CVE-2026-23744 --help to info MCPJam inspector is the local-first development platform for MCP servers. The Latest version Versions 1.4.2 and earlier are vulnerable to remote code...
CVE-2025-55182
React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...
CVE-2025-60787
CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Original link: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that...
CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE
CVE-2026-20127-Cisco SD-WAN Pre-Authentication Remote Code Execution Overview This repository contains a proof-of-concept PoC exploit for CVE-2026-20127 , a critical pre-authentication remote code execution RCE vulnerability affecting Cisco Catalyst SD-WAN Controller formerly vSmart and Cisco...
CVE-2020-0796-exp
SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my lab environment. It was written quickly and needs some work to be more reliable. Sometimes you BSOD. Using this for any purpose other...
CVE-2007-2447-RCE
This exploit helps you to get a reverse shell, exploting Samba 3.0.20 3.0.25 · When executing the script with python3 with the --help parameter, it asks us for a series of parameters --lhost LHOST your host ip where the shell will be received --lport LPORT your port port where the shell will be...
CVE-2026-25253-research
CVE-2026-25253 Proof of Concept One-click RCE on OpenClaw via Cross-Site WebSocket Hijacking. DISCLAIMER: This code is provided for authorized security research and educational purposes only. Use of this code against systems without explicit written permission is illegal and unethical. The author...
blueXploit
blueXploit blueXploit video blueXploit is my own proof-of-concept that reproduces CVE-2023-45866 , the Bluetooth keystroke-injection vulnerability discovered by Marc Newlin. It abuses a flaw in the Bluetooth protocol to inject keystrokes into a target device without pairing , opening the door to...