ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Yo, in this LetsDefend lab I dove into a SharePoint zero-day called ToolShell CVE-2025-53770. Basically, I mimicked a real-world attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection keys,...

l4j-info

l4j-info Compiling valuable links as I find them documenting CVE-2021-44228 or Log4J Critical First Party advisories: Existing Log4J 1.2 vulnerability CVE-2019-17571 is also potentially present Apache Log4J Version 2.x Security Information VMWare critical vulnerability advisory Cisco product...

CVE-2016-10033

PoC for CVE-2016-10033 RCE against WordPress 4.6 usage: ./CVE-2016-10033.py example: ./CVE-2016-10033.py http://site.com/ 1.2.3.4:4444 admin Python port +alterations of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html Required: Requests pip install requests I...

CVE-2017-0199-Fix

CVE-2017-0199 Fix Remove CVE-2017-0199's ability to execute code by changing the default handler for .hta files. The default handler for files invoked through OLE2 COM Objects is stored separately from the local system's default application and can only be changed through the registry. Basic Logi...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: 1Panel Client Certificate Bypass RCE Vulnerability Integrated Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operations and maintenance management panel that provides a graphical interface for deploying websites, managing servers,...

CVE-2024-3094

Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 PoC Script CVE-2025-58434 Flowise -lp...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

CVE-2025-69600

CVE-2025-69600 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

CVE-2026-92777

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code...

CVE-2026-92777

A potential vulnerability exists in some Lenovo Tablets that could allow an attacker with physical access to an unlocked device to bypass device protections and execute arbitrary code . The underlying cause is associated with the use of a default cryptographic key (CWE-1349). No specific exploit ...

CVE-2026-92629

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-92629

An improper authorization vulnerability exists in the Lenovo Baiying PC Client , which is distributed exclusively in the Chinese market. This flaw could allow a local authenticated user to achieve arbitrary code execution with elevated privileges. Specific details regarding the root cause, affect...

CVE-2026-75941

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code...

CVE-2026-75941

A potential vulnerability exists in the Lenovo Legion Zone application, which is distributed exclusively in the Chinese market . The flaw involves deserialization of untrusted data (CWE-502), potentially allowing an attacker on the same logical network to achieve arbitrary code execution . The vu...

CVE-2024-44849

CVE-2024-44849 Author: Extencil [email protected] CVE-2024-44849 is a critical RCE vulnerability that impacts all previous versions up to Qualitor 8.24. Qualitor Website Using this program to attack or compromise any company or system without mutual consent is illegal. The author of this cod...

OpenSSH-CVE-2024-6387-Fix

CVE-2024-6387 OpenSSH Vulnerability Mitigation Script Overview This Bash script is designed to help mitigate the CVE-2024-6387 vulnerability in OpenSSH. The vulnerability affects certain versions of OpenSSH and can potentially allow remote unauthenticated attackers to execute arbitrary code on yo...

Analysis-And-POC-N8N-CVE-2025-68613

Overview n8n and CVE-2025-68613 n8n is a workflow automation platform used to integrate systems and services through visual flows and JavaScript expressions. CVE-2025-68613 is a critical Remote Code Execution RCE vulnerability, with CVSS 9.9 , affecting multiple versions of n8n. The flaw occurs i...

react2shell-scanner

react2shell-scanner A high-fidelity command-line vulnerability scanner for detecting CVE-2025-55182 and CVE-2025-66478 Remote Code Execution in Next.js applications using React Server Components RSC. 🚨 Vulnerability Overview These critical vulnerabilities affect Next.js applications using React...