CVE-2025-13597

AI Feeds = 1.0.11 - Unauthenticated Arbitrary File Upload The AI Feeds WordPress plugin versions 1.0.11 and below contain an unauthenticated remote code execution vulnerability in the actualizadorgit.php file. This file is directly accessible via HTTP without any authentication or authorization...

CVE-2025-47916

CVE-2025-47916 - Invision Community Remote Code Execution RCE Vulnerability About This repository provides a proof‑of‑concept description for CVE‑2025‑47916 , a Remote Code Execution vulnerability affecting Invision Community versions 5.0.0 through 5.0.6. The issue stems from improper handling of...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - "Baron Samedit" Lab & Exploit This repository provides a self-contained, educational environment to understand and exploit CVE-2021-3156 , a heap-based buffer overflow in sudo that allows any unprivileged user to gain root privileges on vulnerable systems sudo versions prior to...

CVE-2017-11882-

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ Kudos, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

Liferay-CE-Portal-Java-Deserialization

Liferay-CE-Portal-Java-Deserialization This repo contains PoC for the remote code execution vulnerability of Liferay CE Portal! Payloads I already shared payloads in repo. You must find the right syntax by brute-force method.Payloads I share are for time-based proof of concept sleep 10. The...

CVE-2007-2447-Exploitation-SIEM-Detection-Lab

🛡️ CVE-2007-2447 Exploitation & SIEM Detection Lab Wazuh + MITRE ATT&CK B.Tech Project BTP | IIIT Pune Based on: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi A fully functional cybersecurity home lab built on a single machin...

Exploit-en-Python-para-CVE-2023-4147

🚨 Python Exploit for CVE-2023-4147 Proof of Concept exploit for CVE-2023-4147. Exclusively for security research and education. ⚠️ Legal Warning EXCLUSIVELY EDUCATIONAL AND AUTHORIZED USE ✅ Authorized security research ✅ Controlled lab environments ✅ Cybersecurity education ✅ Authorized bug bounty...

xwiki-cve-2025-24893-exploit

XWiki CVE-2025-24893 Exploit Unauthenticated Remote Code Execution exploit for XWiki versions vulnerable to CVE-2025-24893. Vulnerability Overview XWiki versions prior to 15.10.9 are vulnerable to unauthenticated RCE through Groovy script injection in the SolrSearch RSS feed handler. The...

CVE-RUBY

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

Security update for iperf

This update for iperf fixes the following issues: CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remote...

Debuggable-App-Exploit

CVE-2024-31317 Debuggable App Exploit A Python-based exploit for CVE-2024-31317 Android Zygote Injection that makes any installed Android app debuggable by injecting malicious zygote arguments through the hiddenapiblacklistexemptions setting. Includes optional Frida gadget injection for runtime...

cve-2026-3359-exp

CVE-2026-3359 is an unauthenticated SQL Injection vulnerability situated within Web10's wordpress plugin "Form Maker" in all versions up to version 1.15.42. In order to use this PoC/exploit, first set up a virtual enviroment through the commands "virtualenv name of your enviroment here" or "venv...

password_generator

PassForge - All-in-One Password Generator CLI A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization options. Features 17 Generation Modes Generator| Command| Description ---|---|--- Random| random, r|...

cve-lite-on-pi

cve-lite-on-pi A short write-up of running CVE Lite CLI against the pi monorepo, and what it found. Background This experiment was prompted by the article "OWASP CVE Lite CLI – New Tool to Scan for Vulnerabilities in Your Projects" CyberSecurityNews. What is CVE Lite CLI? CVE Lite CLI is a...

CVE-2026-23918-Passive-Audit

CVE-2026-23918 audit script alternatively you could just curl the headers and take a peek, but here comes the: Non-invasive HTTP metadata auditor for Apache HTTP Server CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19 exposure triage. The tool sends ordinary HTTP HEAD/GET...

n8n-cve-2025-68613

CVE-2025-68613 – n8n Expression Injection RCE Toolkit ini menyediakan scanner dan exploit PoC untuk kerentanan kritis CVE-2025-68613 pada n8n Workflow Automation Platform. This repository provides scanner and exploit PoC scripts for the critical CVE-2025-68613 vulnerability affecting n8n Workflow...

CVE-2025-69599

CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

Docker-Container-CVE-2020-13401

CVE-2020-13401 Study Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11 Containers that are created with Docker Engine versions before 19.03.11 are vulnerable to receive and apply fake RA Router Advertisement messages from other containers in the network. Receiving...

DASICS-CVE-2021-3156

DASICS CVE-2021-3156 Version Requirements sudo: 1.8.31 glibc: 2.31 Linux: 4.18 or 5.10.167-gee203559bc0b-dirty Usage For convenience, when compiling Linux, do not use the initramfs method. Instead, use the rootfs.img provided in this repository as the root filesystem to boot. It contains the...