struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 XML Deserialization RCE This repository demonstrates exploitation of Apache Struts S2-052 CVE-2017-9805 using malicious XML deserialization. The exploit was developed while solving the INE eWPTX Practice Range – Struts XML Deserialization RCE lab. Vulnerability Overview Apach...

lab-cve-2025-57819

Trabajo en curso Laboratorio FreePBX CVE-2025-57819 - Cadena de SQLi sin autenticación → RCE PoC de Nuclei Pon en marcha un laboratorio reproducible de FreePBX 15 Docker para validar CVE-2025-57819 — una inyección SQL crítica no autenticada en los endpoints AJAX de userman que puede encadenarse...

RedArrow

RedArrow3.2 - ThinkPHP 5.0.23 Remote Command Execution Tool User Guide 1. Tool Introduction RedArrow3.2 is a graphical tool for the ThinkPHP 5.0.23 remote command execution vulnerability, providing two main functions: single command execution and an interactive GodzillaShell-like interface. This...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + Ransomware Disclaimer This project is solely for educational purposes. This project utilise code from rkshrksh/2048-Game and kangtastic/cve-2019-2215. Project Description This project is part of Singapore Institute of Technology Mobile Security module. The project...

CVE-2025-49113-Roundcube-RCE

CVE-2025-49113 — RCE post-autenticación en Roundcube mediante deserialización de objetos PHP Resumen Campo| Detalles ---|--- CVE| CVE-2025-49113 Software| Roundcube Webmail Versiones afectadas| ≤ 1.6.10 Vulnerabilidad| Deserialización de objetos PHP → RCE Autenticación| Requerida cualquier usuari...

CVE-2014-6271-Shellshock

CVE-2014-6271 Shellshock xpl0ited por infrar3d Este repositorio contiene un exploit de prueba de concepto para CVE-2014-6271 Shellshock. Shellshock es una vulnerabilidad crítica en GNU Bash donde variables de entorno especialmente diseñadas permiten la ejecución arbitraria de comandos. Cuando un...

atlas-tj-actions-poc

CVE-2025-54416: tj-actions/branch-names Command Injection PoC This repository demonstrates CVE-2025-54416 , a critical command injection vulnerability in tj-actions/branch-names affecting over 5,000 public repositories. Vulnerability The tj-actions/branch-names GitHub Action versions...

CVE-2025-32434-exploit

Resumen Este exploit demuestra una vulnerabilidad crítica de ejecución remota de código CVE-2025-32434 en versiones de PyTorch /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -...

CVE-2026-41940

CVE-2026-41940: Bypass de Autenticación de cPanel/WHM Objetivo Único y Múltiple Aviso legal: Este documento y el script asociado exploit.py se proporcionan estrictamente con fines educativos, investigación de seguridad y pruebas de penetración autorizadas. No utilice este software contra sistemas...

CVE-2022-36162

CVE-2022-36162 Descripción sugerida pdftoroff hovacui 1.1.0 está afectado por: Ejecución de comandos. El impacto es: ejecutar código arbitrario local. El componente es: hovacui.c, línea 1574. El vector de ataque es: Para explotar la vulnerabilidad, solo tienes que cambiar la variable de entorno...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview Field| Details ---|--- CVE| CVE-2025-24893 Software| XWiki Vulnerability| Server-Side Template Injection SSTI → RCE Authentication| Not required CVSS Score| Critical Context| Discovered during HackTheBox CTF Description XWiki exposes a...

Exploit for Improper Authentication in Openprinting Cups

CVE-2026-34990: CUPS 2.4.16 local privilege escalation PoC A...

Exploit for CVE-2026-87902

WP-CVE-2026-87902 Checker A lightweight, read-only security c...

CVE-2026-101047

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101045

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101043

pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand $VAR environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project's pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the...

CVE-2018-6574

CVE-2018-6574 Pasos para reproducir: 1. Crea un archivo .c que contenga el comando malicioso revshell: include include static void malicious attributeconstructor; void malicious system""; 2. Compílalo usando GCC. Debes compilarlo en la misma arquitectura y sistema operativo que el objetivo por...

system_bt_AOSP10_r33_CVE-2020-0471

Pila Bluetooth Fluoride Compilación y ejecución en AOSP Simplemente compile AOSP: Fluoride está ahí por defecto. Compilación y ejecución en Linux Instrucciones para Ubuntu, probadas en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar el código fuente mkdir /fluoride cd /fluoride git clone...

JNDI-Exploit-1.2-log4shell

JNDI-Exploit-1.2-log4shell Detalles : CVE-2021-44228 Uso : java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip Local ip address -l, --ldapPort Ldap bind port default: 1389 -p, --httpPort Http bind port default: 8080 -u, --usage Show usage default: false -h, --help Show this help Basic Payloads :...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server and Confluence Data Center include a significant unauthenticated remote code execution vulnerability identified as CVE-2022-26134, according to a security advisory released by Atlassian on June 2, 2022. The vulnerability was unpatched when it was published on...