PoC-CVE-2026-23744

PoC-CVE-2026-23744 Remote Code Execution on MCPJam Inspector Reference https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...

CVE-2021-41773

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo docker run -d -t -p 80:80 --name /bin/bash $ sudo docker exec -it ./bin/apachectl -k restart To access docker container for custom config file $ docker exec -it /bin/bash file config in /usr/local/apache2/conf/httpd.conf after config run comma...

ldap-swak

LDAP Swiss Army Knife Multi-function LDAP server utility. Quickly setup LDAP server for testing purposes, MitM proxies for intercepting plaintext or forwarding NTLM credentials or exploit various Java JNDI/LDAP Client vulnerabilities. Author: Moritz Bechler [email protected] Project...

cve-2026-4257

CVE-2026-4257 This exploits CVE-2026-4257, a Server-Side Template Injection SSTI vulnerability in the "Contact Form" Wordpress plugin by Supsystic in versions 1.7.36 and before. This vulnerability allows an unauthenticated attacker to achieve Remote Code Execution. The vulnerability exists in the...

r2s

React2Shell R2S - CVE-2025-55182 Testing Tool Advanced exploitation testing tool for CVE-2025-55182 vulnerability assessment Features • Installation • Usage • Testing Environment • Legal 📖 What is R2S? R2S React2Shell is a security testing tool designed to help security researchers, developers, a...

nextjs-security-scanner

La versión japonesa está disponible en README.ja.md. nextjs-security-scanner Script Bash para detectar CVE-2025-55182 React2Shell y exposición de credenciales en proyectos Next.js. Sin dependencias. CVE-2025-55182: React2Shell CVSS: 10.0 CRÍTICO | CWE-502: Deserialización de datos no confiables |...

CVE-2024-6387

EXPLOIT CVE-2024-6387 💥 EXPLOIT CVE-2024-6387 regreSSHion Herramienta para análisis, detección y pruebas controladas de la vulnerabilidad CVE-2024-6387 en servidores OpenSSH. ⚠️ Aviso Legal y Ético Este repositorio es exclusivamente educativo. Úsalo únicamente en: Laboratorios HTB, TryHackMe...

react2shell

Descripción: CVE-2025-55182 es una vulnerabilidad crítica de ejecución remota de código RCE no autenticada en el paquete react-server utilizado por React Server Components RSC. CVE-2025-66478 es la vulnerabilidad RCE correspondiente en Next.js, que hereda la misma falla subyacente a través de su...

CVE-2025-5548

🧪 FreeFloat FTP Server Buffer Overflow Lab CVE-2025-5548 📌 Descripción Este laboratorio demuestra cómo explotar una vulnerabilidad de Stack Buffer Overflow en FreeFloat FTP Server , identificada como CVE-2025-5548. El objetivo es comprender el proceso completo de explotación en aplicaciones Windo...

CVE-2026-23869

CVE-2026-23869 - Proof of Concept PoC Description This repository contains a Proof of Concept PoC for CVE-2026-23869 , a vulnerability affecting React Server Components before 19.2.5. The vulnerability allows an attacker to cause a significant CPU charge on the server making it non responsive for...

ghidra_svr_bridge

binja-ghidra A Binary Ninja plugin that connects to a Ghidra Server repository and imports its analysis — symbols, function names, and comments — directly into an open Binary Ninja binary view. What it does Ghidra and Binary Ninja each have strengths. This plugin lets you use both on the same...

halo-2.25.4-CVE-2026-67919

Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - Exploit LFI e RCE Info Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Run the exploit python3 exploit.py...

CVE-2026-34200

Nhost MCP Server: One-Click Infrastructure Compromise Official Advisory: This vulnerability was acknowledged and published by Nhost: GHSA-6c5x-3h35-vvw2 This repository documents a vulnerability in the Nhost Local MCP Server. The service lacks inbound authentication and implements a permissive CO...

CVE-2026-31431-patch

CVE-2026-31431-patch A temporary mitigation for CVE-2026-31431 vulneribility git clone https://github.com/rshosting/CVE-2026-31431-patch.git cd CVE-2026-31431-patch sh checkaead.sh Once server is back from reboot execute below script: sh completeaead.sh...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server Detection Toolkit Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962. 🧠 Vulnerability Overview CVE: CVE-2026-21962 Severity: Critical Attack Vector: Network Authentication...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

CVE-2026-33154

Dynaconf SSTI Vulnerability Report Summary Dynaconf is vulnerable to Server-Side Template Injection SSTI due to unsafe template evaluation in the @Jinja resolver. When the jinja2 package is installed, Dynaconf evaluates template expressions embedded in configuration values without a sandboxed...

CVE-2021-41773

CVE-2021-41773 Path Traversal for Apache 2.4.49 https://ubuntu.com/security/CVE-2021-41773 Affected base time: 22:49 06/10/2021 Usage IP python3 CVE-2021-41773.py -i 10.10.10.10 -s List of ips python3 CVE-2021-41773.py -l /home/ac1d/Documents/code/python/CVE-2021-41773/ips.txt -s Screenshot Check...