CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Oracle E-Business Suite Pre-Auth RCE Exploit A critical pre-authentication Remote Code Execution RCE flaw in Oracle E-Business Suite versions 12.2.3–12.2.14 allows attackers to gain full control over vulnerable servers via malicious HTTP requests — now actively exploited in the...

CVE-2021-32648

CVE-2021-32648 Patch your code for October CMS Auth Bypass CVE-2021-32648 Instructions 1. Open the file vendor/october/rain/src/Auth/Models/User.php 2. Perform the patch found in these diff notes 3. Save the file Overview You are converting a loose comparison to a strict comparison by replacing t...

FreePBX-Multiple-CVEs-2025

FreePBX-Multiple-CVEs-2025 This repository documents three security vulnerabilities discovered in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, including analysis, impact, and proof-of-concept details for security research and awareness purposes. Description CVEs 🔴 CVE-2025-61675 A...

BlueKeep

Bluekeep PoC This repo contains research concerning CVE-2019-0708. Bluekeep or CVE-2019-0708 is an RCE exploit that effects the following versions of Windows systems: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 The vulnerability occurs during...

CVE-2022-46169_poc

CVE-2022-46169 unauthenticated remote code execution Description Authentication Bypass: a hostname-based authorization check is not implemented safely for most installations of Cacti Command Injection: unsanitized user input is propagated to a string used to execute an external command Demo POC...

Unihackers---CVE-2025-55182-

ITALIAN GANG React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution...

CVE-2024-57376

CVE-2024-57376 Pre-auth remote code execution exploit for D-Link DSR-250 and DSR-250N Security advisory: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Usage $ python3 exploit.py usage: Example $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250...

CVE-2023-27524

CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is running with an insecure default configuration CVE-2023-27524. The script checks if a Superset server's session cookies are signed with any well-known default Flask SECRETKEYs. The --validate flag can be...

pentest-mcp

Pentest MCP Pentest MCP is a TypeScript MCP server for authorized security assessments. It gives a human researcher or a tool-using assessment agent one scoped interface for discovery, validation, capture, credential checks, local audit, evidence retrieval, and report preparation. Each active too...

CTF-2021

CTF-2021 Notes This CTF is not using DB for authentication. In addition to that, this CTF generates static tokens because of the following: 1. Minimize the chances of a user solving this CTF in a different way 2. Minimize the chances of a user missing hints by modifying or bypassing web...

EUVD-2026-109993

Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool Detection in Action $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y |...

CVE-2026-63030

wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Batch Route Confusion + CVE-2026-60137 SQL Injection Zero-dependency exploitation toolkit for the wp2shell vulnerability chain in WordPress Core. A single anonymous HTTP request achieves remote code execution on a default WordPress installatio...

CVE-2023-38646

CVE-2023-38646 - Metabase Pre-Auth RCE ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author securezeron Step Guides 1. Set Up the Listener on your attacker machine: nc -nlvp 4444 2. Then, run this command: python3...

CTT-enhanced-VMware-vCenter

CTT-enhanced-VMware-vCenter Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 CVSS 9.8 as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements. 🔥 What This CTT Enhancement Actually Does: 1...

CVE-2023-24488-SIEM-Sigma-Rule

Sigma Rule: Detection of Pre-Auth XSS CVE-2023-24488 Detect Citrix Gateway Pre-Auth XSS CVE-2023-24488 vulnerability exploitation attempts. This Sigma rule looks for XSS attack patterns in the postlogoutredirecturi query parameter. Rule Description The provided Sigma rule is designed to identify...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 Scanner Scans Kestra instances for the endsWith"/configs" authentication filter bypass. Kestra's AuthenticationFilter.java checks request.getPath.endsWith"/configs" instead of matching the exact path /api/v1/configs. Since Kestra addresses resources via...

SiteCore-RCE-Detection

SiteCore-RCE-Detection For detection of sitecore RCE - CVE-2021-42237 Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237 Relies on sitecore version detection and response when a request is made to vulnerale Report.ashx via Get and Post. The script takes a file containing list of urls in...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth infinite loop / remote DoS. Description attributeenumerate in src/libradius/radiusmessage.c:247-271 accepts RADIUS attributes whose length byte is smaller than sizeofrattrt 2. For length == 0: data-len = next-length - sizeofrattrt...

CVE-2025-47227_CVE-2025-47228

ScriptCase - Pre-Authenticated Remote Command Execution Chaining administrator's password reset authentication bypass, CVE-2025-47227 and shell injection authenticated remote command execution, CVE-2025-47228 Pre-authenticated remote command execution is achieved by chaining two vulnerabilities:...