stylesmuggler-ioc-toolkit

StyleSmuggler IOC Toolkit — CVE-2026-75650 Magento zero-day · Adobe Commerce zero-day · CVE-2026-75650 · APSB26-146 · VULN-39341 · unauthenticated RCE · Magento malware · Magento backdoor removal · Magento 2.4.9 vulnerability · Rust implant · GraphQL styles injection · PHP web shell Community...

CVE-2026-20253

CVE-2026-20253 Lab Environment Splunk Enterprise Pre-Auth RCE via PostgreSQL Sidecar Service | ---|--- CVE| CVE-2026-20253 CVSS| 9.8 Critical Type| Unauthenticated Remote Code Execution CWE| CWE-306: Missing Authentication for Critical Function Product| Splunk Enterprise 10.0.x / 10.2.x DISCLAIME...

CVE-2025-55182

CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker python CVE-2024-27198-RCE.py -t http://192.168.198.173:8111 --behinder4...

CVE-2025-58434

CVE-2025-58434 - Flowise unauthenticated account takeover, chained to CustomMCP RCE Two Flowise 3.0.5 issues, chained: 1. CVE-2025-58434 - password-reset token disclosure. POST /api/v1/account/forgot-password returns the target user's tempToken directly in the JSON response. Feed it to POST...

cve-2013-2094

= CVE-2013-2094 code for http://timetobleed.com/a-closer-look-at-a-recent-privilege-escalation-bug-in-linux-cve-2013-2094/ == How to build You need to build the C file of your choice like this: gcc -O2 file-name.c -O2 is required due to how the exploit actually works see the blog post for more...

Exploiting-Stagefright-Vulnerability-CVE-2015-3864

Exploiting-Stagefright-Vulnerability-CVE-2015-3864 Stagefright refers to a set of software flaws in Android versions 2.2 "Froyo" through 5.1.1 "Lollipop," which affected 95% of all Android phones still. If the vulnerability is exploited, an attacker can use remote code execution and privilege...

CVE-2017-8759-Exploit-sample

CVE-2017-8759-Exploit-sample Running CVE-2017-8759 exploit sample. Flow of the exploit: Word macro runs in the Doc1.doc file. The macro downloads a badly formatted txt file over wsdl, which triggers the WSDL parser log. Then the parsing log results in running mshta.exe which in turn runs a...

CVE-2021-30005-POC

CVE-2021-30005-POC PoC for CVE-2021-30005. Details The vulnerability resides in the fact that PyCharm would automatically activate a virtual environment found in the project when opened for the first time. This allowed an attacker to create a repository containing a malicious virtual environment...

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2 contains a Remote Code Execution RCE vulnerability in the session serialization mechanism. An authenticated administrator can inject arbitrary Lua code through the domain admin mydirectory basefolder field, which gets executed server-side via loadfile. This is a separate...

CVE-2024-44625-Gogs-RCE-0.13.0

CVE-2024-44625 & Gogs-RCE-0.13.0 Validated against a 0.13.0-era Gogs behind a reverse proxy. Primitive: web editor symlink-follow to an ABSENT .git/hooks/pre-receive creates that file executable. Every subsequent push to the repo runs it. Usage: Reverse shell run listener first: nc -lvnp 4444...

opsxcq-cve-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

CVE-2022-26134

CVE-2021-46422 RCE Installation git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt Place CVE-2021-46422 RCE.py into the pocsuite3\pocs directory cd pocs pocsuite3 Usage Single URL: pocsuite -r CVE-2021-46422 RCE.py -u url Multip...

guardskill

GuardSkill A repository can make your coding agent run code the moment it opens the folder. GuardSkill checks for that before you do. npx guardskill . Read-only. No network calls, no telemetry, no configuration, no account, no dependencies. It reads git configuration and hook scripts, prints what...

CVE-2025-49113

CVE-2025-49113 RCE exploit the method for username/password authentication in this Exploit comes in 4 steps the code is a bit messy...

CVE-2020-10238

Made by HK CVE-2020-10238: Incorrect Access Control in comtemplates- RCE CVE-2020-10239: Incorrect Access Control in comfields SQL field- RCE Link https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates.html...

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

dynamorio

DynamoRIO About DynamoRIO DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling,...

CVE-2026-73311

CVE-2026-73311: OAuth2 authorization code replay XenForo before 2.3.13 allows an OAuth2 authorization code to be redeemed more than once. What happens The authorization-code grant loads a code, verifies its time-based validity, and creates a token pair. The successful path does not delete the cod...