CVE-2021-22205

CVE-2021-22205 Fork of mr-r3bot/Gitlab-CVE-2021-22205 Introduction CVE-2021-22205: GitLab Unauthenticated Remote Code Execution Vulnerability Exploit Removed the dependency on djvumake & djvulibre, directly generates payload internally, can be executed on Windows platform. Usage 需要授权 python3...

wp2shell-cve-2026-63030-root-cause

wp2shell CVE-2026-63030 + CVE-2026-60137: Independent Root Cause Analysis WordPress core disclosed wp2shell on 2026-07-17 as a critical, unauthenticated RCE affecting default installs WordPress 6.9.0-6.9.4, 7.0.0-7.0.1, zero plugins required. The original discoverer Searchlight Cyber withheld...

CVE-2026-3891

CVE-2026-3891 — Pix for WooCommerce Unauthenticated File Upload RCE Nonce Leak → certificatecrtpath Upload → Code Execution Overview CVE-2026-3891 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce WordPress plugin by linknacional versio...

CVE-2022-21371

CVE-2022-21371 Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion Exploit Title: Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion Date: 25/1/2022 Exploit Author: Jonah Tan @picar0jsu Vendor Homepage:...

CVE-2026-48907

CVE-2026-48907 Educational PoC ⚠️ This repository is for educational and defensive security purposes only. Test only on systems you own or are explicitly authorized to assess. Do not use this project against third-party systems. This PoC demonstrates CVE-2026-48907, an unauthenticated RCE...

proxyshell

ProxyShell Proof of Concept Exploit for Microsoft Exchange CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 Details For background information and context, read the blog post detailing the research by Horizon3: https://www.horizon3.ai/news/blog/proxyshell Features No email address needs to be...

CVE-2026-87902-Toolkit

CVE‑2026‑87902 – WordPress Unauth LFI→RCE Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act UK...

wp2shell-lab

wp2shell-lab Educational PoC and lab for CVE-2026-63030 + CVE-2026-60137 : pre-authentication SQL injection in WordPress core via REST batch-route confusion. Discovered by Adam Kues Searchlight Cyber / Assetnote. Fixed in WordPress 6.9.5 / 7.0.2. Quick start bring up the vulnerable lab cd docker ...

CVE-2026-58138-Conductor-Unauth-RCE

CVE-2026-58138 — Conductor Unauthenticated RCE via INLINE GraalVM Evaluator Conductor OSS / Orkes3.21.21 … before 3.30.2 evaluates user-supplied JavaScript in INLINE and LAMBDA / DOWHILE / SWITCH tasks with a GraalVM context built with full host access HostAccess.ALL. The script reflects up to...

wp-cve-2026-63030-check

wp2shell-check Non-intrusive exposure checker for the WordPress "wp2shell" pre-authentication RCE chain CVE-2026-63030 + CVE-2026-60137. ⚠️ Authorized use only. Run this only against WordPress instances you own or have explicit permission to test. It is a triage aid, not an exploit. Scanning...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

CVE-2026-42945-POC

CVE-2026-42945 RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

CVE-2026-20253

🚨 CVE-2026-20253 - Critical Splunk Enterprise Unauthenticated File Creation Vulnerability Unauthenticated arbitrary file creation and truncation vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. 📖 Executive Summary CVE-2026-20253 is a critical vulnerability in Splunk Enterprise...

CVE-2025-55182-shellinteractive

CVE-2025-55182-shellinteractive Base used from: https://github.com/Emiyelbarto/CVE-2025-55182-PoC Thank you very much for the great contribution. Overview CVE-2025-55182 is a deserialization vulnerability in Next.js/React Server Components that allows unauthenticated remote attackers to execute...

CVE-2026-55726

CVE-2026-55726: Publicly Listable Azure Blob Storage Container device logs Advisory Field| Value ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Vector 4.0|...

CVE-2026-30784-rustdesk-poc

CVE-2026-30784-rustdesk-poc CVE-2026-30784: RustDesk hbbs Traffic Amplification PoC & PCAP Analysis Key Findings Key Finding: Enforcing key-based authentication -k does not prevent this amplification attack, because the amplification response is triggered during the unauthenticated initial...

Room-Walkthrough-Billing

🧠 Room Walkthrough: Billing Written by: Aditya Bhatt | Open Source Contributor 📦 Overview In this walkthrough, we go full force into Billing Room , showcasing a vulnerable MagnusBilling instance, a juicy unauth RCE CVE-2023-30258, and a fail2ban sudo misconfig that screams “root me.” This room...

CVE-2021-38647

OMIGOD Proof on Concept Exploit for CVE-2021-38647 OMIGOD For background information and context, read the our blog post detailing this vulnerability: https://www.horizon3.ai/news/blog/omigod Details CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. OMI agent...

CVE-2026-56121-Feast-Unauth-RCE

CVE-2026-56121 — Feast Unauthenticated RCE via gRPC Registry Deserialization The Feast 0.63.0 registry gRPC server dill.loads the user-defined function of an OnDemandFeatureView as soon as a spec arrives — before any authorization check. The shipped config is auth: noauth, so any client that can...

CVE-2026-54350-Budibase-NoSQL-Injection

CVE-2026-54350 — Budibase Unauthenticated NoSQL Operator Injection Unauthenticated JSON/NoSQL operator injection in Budibase. Any anonymous visitor of a published Budibase app that exposes a PUBLIC query backed by a document datasource MongoDB, CouchDB, Elasticsearch, DynamoDB-PartiQL, or REST wi...