SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis

SharePoint ToolShell CVE-2025-53770 - Análise de Incidentes Visão Geral Este projeto documenta a investigação de uma tentativa de exploração real direcionada a um servidor SharePoint usando a vulnerabilidade ToolShell CVE-2025-53770. O ataque demonstra uma cadeia completa de exploração, incluindo...

CVE-2024-2053

लॉग पॉइज़निंग के माध्यम से LFI से RCE एक्सप्लॉइट Python3 एक्सप्लॉइट CVE-2024-2053 Artica Proxy के लिए 📝 विवरण यह Python3 स्क्रिप्ट लॉग पॉइज़निंग तकनीकों के माध्यम से रिमोट कोड निष्पादन RCE प्राप्त करने के लिए लोकल फ़ाइल समावेशन LFI कमजोरियों का शोषण करती है। विशेष रूप से Artica Proxy CVE-2024-205...

wp2shell

wp2shell Injeção SQL cega por confusão de rota batch do WordPress REST — cadeia de exploração automatizada. CVE-2026-63030 / CVE-2026-60137 | ---|--- Afetado| WordPress 6.9.0 – 6.9.4 e 7.0.0 – 7.0.1 Corrigido| WordPress 6.9.5 / 7.0.2 Sink| authornotin SQL via parâmetro authorexclude dessincroniza...

sharepoint-toolshell-micro-postmortem

Micropost-mortem de Incidente — Campanha “ToolShell” do Microsoft SharePoint On-Prem Este kit realiza a triagem da campanha de dia zero “ToolShell” de meados de 2025 contra o Microsoft SharePoint Server local ; o SharePoint Online está fora do escopo. Ele fornece caças reproduzíveis de ponta a...

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit Questo repository contiene uno strumento proof-of-concept basato su Go per testare uno scenario di vulnerabilità noto di Control Web Panel CWP correlato a CVE-2026-57517. L'implementazione prende di mira un percorso di SQL injection cieca e include la distribuzione...

CVE-2026-48907-Joomla-JCE-detection

Joomla JCE CVE-2026-48907 — PoC-Validierung, Webshell-Artefakte und SOC-Erkennung Defensiver Validierungsbericht und SOC-orientierte Erkennungshinweise für CVE-2026-48907 , das den Joomla Content Editor JCE bis Version 2.9.99.4 betrifft. Zweck des Repositorys Dieses Repository dokumentiert eine...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 Versão aprimorada pela CTT do exploit de SSRF para RCE do Microsoft Exchange Server ProxyShell/ProxyLogon, outra vulnerabilidade crítica CVSS 10.0 que afetou centenas de milhares de organizações em...

chamilo-lms-unauthenticated-rce-poc

Chamilo LMS RCE non autenticata PoC Questo è uno script scritto in Python che consente lo sfruttamento della falla di sicurezza del software Chamilo LMS descritta in CVE-2023-4220. Il sistema è vulnerabile nelle versioni precedenti alla 1.11.24. Utilizzo Clona il repository sulla tua macchina e...

cms-exploitation-campaign

Nuclei Templates da Campanha de Exploração de CMS Pacote de templates Nuclei defensivos para a campanha de exploração de CMS em larga escala reportada pelo Australian Cyber Security Centre da ASD em 9 de julho de 2026. Aviso:...

CVE-2026-57517

Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers can exploit MySQL root privileges...

Exploit for Improper Input Validation in Apache Activemq

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overvi...

Spacelabs Healthcare Sentinel 安全漏洞

Spacelabs Healthcare Sentinel is a cardiology information management system developed by Spacelabs Healthcare in the United States. Vulnerabilities exist in Spacelabs Healthcare Sentinel versions 10.5.x and later, as well as versions 11.6.0 and earlier under the 11.x.x range. These vulnerabilitie...

Exploit for Server-Side Request Forgery in Apache Axis

Axis1.4 CVE-2019-0227 Remote Command Execution Vulnerability E...

CVE-2026-32271

Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 through 5.5.4, there is an SQL injection vulnerability in the Commerce TotalRevenue widget which allows any authenticated control panel user to achieve remote code execution through a four-step...

Exploit for CVE-2026-1311

CVE-2026-1311 CVE-2026-1311 Sample PHP Payload Files...

CVE-2026-27180

MajorDoMo aka Major Domestic Module is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning. The saverestore module exposes its admin method through the /objects/?module=saverestore endpoint without authentication because it uses gr'mode'...

CVE-2026-27180

MajorDoMo aka Major Domestic Module is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning. The saverestore module exposes its admin method through the /objects/?module=saverestore endpoint without authentication because it uses gr'mode'...

CVE-2026-27180 MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning

MajorDoMo aka Major Domestic Module is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning. The saverestore module exposes its admin method through the /objects/?module=saverestore endpoint without authentication because it uses gr'mode'...

CVE-2026-27180

CVE-2026-27180 — MajorDoMo supply chain RCE : Affected MajorDoMo allows unauthenticated remote code execution via a poisoned update URL. The saverestore admin endpoint at /objects/?module=saverestore is exposed because gr('mode') reads from $_REQUEST instead of the framework’s mode, enabling an a...

PT-2026-20516

MajorDoMo aka Major Domestic Module is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning. The saverestore module exposes its admin method through the /objects/?module=saverestore endpoint without authentication because it uses gr'mode'...