CVE-2024-34312

CVE-2024-34312 Description Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a Cross-Site Scripting XSS vulnerability via its IDE component. Additional Details The browser connects directly to a websocket running on the jail server. Through the websocket, the jail server c...

React2Shell-PoC

React2Shell-PoC A proof-of-concept exploit for CVE-2025-55182 and CVE-2025-66478 , critical Remote Code Execution vulnerabilities in React Server Components RSC and Next.js applications. Overview React2Shell demonstrates the exploitation of unsafe deserialization in Next.js server action handlers...

doublehop

Doublehop This tool aims to assist in using PowerShell Remoting / WinRM to execute PowerShell commands on remote hosts through WinRM double hop technique. This tool assumes you have internal network and CLI access. Usage doublehop Usage: -c string Command we are executing. -j string Host we are...

CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-37164, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in HPE OneView. DISCLAIMER THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY. Use only o...

CVE-2026-92162

CVE-2026-92162: Flatpak DeployAppstream arch Path Traversal Educational write up and test mode proof of concept for a path traversal in the Flatpak system helper flatpak-system-helper. The DeployAppstream D-Bus method accepts an arch string that is placed into a filesystem path and created as roo...

CVE-2023-36319

CVE-2023-36319 By modifying the compression plug-in command, the attacker can cause the server to execute arbitrary commands during the upload process. Only used for authorized security testing, please do not use it for illegal purposes. Violations have nothing to do with the author. Affected...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...

CVE-2024-3400-

PAN-OS Firewall Command Injection Vulnerability This repository contains a Go script that exploits a Command Injection vulnerability in firewalls running Palo Alto Networks' PAN-OS operating system. The vulnerability, identified as CVE-2024-3400, allows an unauthenticated attacker to execute...

CVE-2026-5027-Langflow

CVE-2026-5027 and CVE-2026-10520 CVE-2026-25089 exploiter: Clone git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow Usage exploit.py file Automatic testing and exploitation. python3 exploit.py -u https://target.com CLI custom settings Use your own webshell...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246 Exploit Usage: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Features of This Tool Since the heartbeat mechanism triggers the vulnerability every 30 seconds, the tool introduces a...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution Exploit Usage: python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami" Result: Malicious SpEL expression route added successfully! Route refresh successful! Attack result obtained successfully:...

CVE-2023-25136-PoC

CVE-2023-25136 Vulnerability Reproduction This project provides a minimal local experimental environment for reproducing the OpenSSH 9.1p1 pre-authentication double free memory corruption vulnerability CVE-2023-25136 and observing the server process crash DoS effect. Note: Official and mainstream...

cve-2019-1663

🚀 Exploitation of CVE-2019-1663 🧩 Introduction This repository documents the exploitation of CVE-2019-1663, a critical remote code execution RCE vulnerability affecting Cisco RV110W, RV130W, and RV215W Wireless-N VPN routers. Due to insufficient input validation within the web management interfac...

CVE-2022-31814

CVE-2022-31814 Updated Exploit - pfBlockerNG = 2.1.426 Unauth RCE CVE-2022-31814 Description This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads,...

CVE-2023-27372

Research Project: CVE-2023-27372 — SPIP RCE, Lab Environment + Safe PoC 1 Description This repository contains: stand/ — a lab environment vulnerable setup on Docker: SPIP + MariaDB. poc/ — a Python verification tool scanner implementing safe confirmation of the vulnerability Safe PoC without...

CVE-2026-104024

Incomplete List of Disallowed Inputs CWE-184 in the dangerous-extension confirmation of the archive object viewer peach.pas, gridobjopen in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary...

Wireshark

Wireshark Malware Analysis Description This lab I analyzed a known malicious packet capture on the exploit Log4J. I begun my investigation with the same playbook I use for packet capture analysis, which is to examine the statistics and see how many and how much endpoints are communicating. Notici...

cve-2025-24514

🔥 CVE-2025-24514 Remote Vulnerability Check PoC This script is a Python-based PoC that can remotely check for the CVE-2025-24514 vulnerability NGINX configuration manipulation and potential RCE through auth-url injection in ingress-nginx. 🧠 Vulnerability Overview CVE-2025-24514 is a vulnerability...

n8n-cve-2025-68613-thm

CVE-2025-68613 – n8n Critical RCE Exploitation Overview This repository documents a hands-on exploitation of CVE-2025-68613 CVSS 9.9 , a critical Remote Code Execution vulnerability affecting the n8n workflow automation platform versions 0.211.0 through 1.120.3. This exploitation was performed...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

This repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling device discovery, configuring Log4j2 detection CVE-2021-44228, and validating incident response workflows. Key Features ✅ Local script onboarding for...