BUK_TS_KILLER

BUKTSKILLER BUK-TS Exploit RCE Authentification Bypass - CVE-2026-12183: 1. write any password 2. intercept response 3. write "userid=" 4. successfully bypassed Public Exploit for BDU:2025-13914 and CVE-2026-3843...

CVE-2025-23942-poc

WP Load Gallery Exploit CVE-2025-23942 📌 Description Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. ⚠️ Vulnerability Details CVE ID: CVE-2025-23942...

ShadowRay-RCE-PoC-CVE-2023-48022

PoC for a remote command execution vulnerability in Ray framework CVE-2023-48022 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. The Ray framework, an essential tool for Python-based AI and machine learning applications, has encountered a significant security...

langflow-exploit

CVE-2025-3248 - Langflow Code Validation Endpoint RCE A proof-of-concept exploit demonstrating a remote code execution vulnerability in Langflow's code validation endpoint. This vulnerability affects Langflow versions prior to 1.3.0, allowing unauthenticated attackers to execute arbitrary code...

cve-2022-27666-exploits

cve-2022-27666-exploits There are 2 exploitation methods that exploit CVE-2022-27666. For more info on how to use these code bases please check my blog here...

CVE-2025-45778

CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...

Antibody

Antibody Every AI-written code change must survive an attack by a second AI — with proof — before it is allowed to reach production. Antibody is a GitLab Duo pipeline for the "Life After Code" Transcend Hackathon. It treats a codebase like an immune system: when one AI fixes a vulnerability, a...

CVE-2021-43857

CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8. CVE-2021-43857 is a vulnerability marked as Critical priority CVSS 9.8 leading to remote code execution. This vulnerability works on all versions prior to 0.9.8. Tested onl...

git_rce

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

CVE-2018-1335

CVE-2018-1335 RCE vulnerability remote code execution on servers apache Tika-server with versions lower than 1.18 commands: sudo bash install.sh python2 exploit.py...

call_map

========== Call Map .. default-role:: code About Call Map is a tool for navigating call graphs in Python, with plans to support other languages. Below is a screen shot after running callmap -m toolz, then clicking on some functions. .. figure:: docs/UI-clicked-on-function.png While Call Map is...

Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection

CVE-2025-25257 Detection Engineering Repository Overview This repository provides production-ready detection engineering content for CVE-2025-25257 , a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. Successful exploitation can lead...

S2-062

S2-062 CVE-2021-31805/s2-062 Batch Scanning and Exploitation Please comply with laws and regulations; unauthorized attacks on website systems are prohibited. Usage Batch Scan Mode python3 CVE-2021-31805.py -m scan -f 123.txt Command Execution Mode python3 CVE-2021-31805.py -u...

Zabbix-CVE-2024-42327-SQL-Injection-RCE

Zabbix-CVE-2024-42327 RCE PoC / / | / / / | \ / \ / // / / // /| | / / / / / | | / / // // / / // / // // // // / / / / / / / / | |/ / /// // // / / // / // / / / / / |// //// // // //// // NSFOCUS CERT detected that Zabbix released a security announcement and fixed the SQL injection...

OpenPLC_v3

OpenPLC Runtime version 3 Introduction OpenPLC is an open-source programmable logic controller based on easy-to-use software. Our focus is to provide a low-cost industrial solution for automation and research. OpenPLC has been used in many research papers as a framework for industrial cybersecuri...

CVE-2020-23839

CVE-2020-23839 | GetSimple CMS v3.3.16 - Reflected XSS to RCE Exploit Author: Bobby Cooke boku Vulnerability Statistics OWASP Top Ten 2017: A7:2017-Cross-Site Scripting XSS CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - Type 1: Reflected XSS CVSS Base...

Spring4Shell-POC

Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down Reproduction Process Run...

EUVD-2026-113999

Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1, multiple eval calls in the vendored PEAR HTMLQuickForm libraries can execute arbitrary PHP code if form element names contain attacker-influenced data. Standard Chamilo forms u...

CVE-2026-44344

The Chamilo LMS learning management system is vulnerable to arbitrary PHP code execution in versions 1.x before 1.11.40 and 2.x before 2.0.1 . The root cause is the use of eval() calls within the vendored PEAR HTML_QuickForm libraries, which can be triggered if form element names contain attacker...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...