CVE-2023-22515_RCE

Una forma de RCE después de obtener permisos de administración en Confluence Pasos para obtener una shell manualmente Puede cargar un plugin personalizado en el backend para lograr RCE Acceda a plugins/servlet/com.jsos.shell/ShellServlet...

CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...

Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220

Chamilo-LMS-Unauthenticated-File-Upload- Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS ' dollarboysushil.php .png We can then upload this file by issuing following command $ curl -F '[email protected]'...

PDFernetRemotelo

Un Hacker En Capital ¡Bienvenido a mi repositorio de GitHub! Soy Un Hacker En Capital , y aquí encontrarás todos los scripts y herramientas que uso en mis streams y videos. Únete a mí mientras exploramos el fascinante mundo de la ciberseguridad y la tecnología. Sobre Mí Soy un apasionado de la...

Tor-0day-JavaScript-Exploit

CVE-2024-9680 - TOR Browser 0day Exploit UAF Use-After-Free in Animation Timelines - Remote Code Execution Vulnerability Actively exploited in the wild targeting Tor Browser users View Analysis • Official CVE Overview This repository contains a comprehensive analysis and educational demonstration...

CVE-2026-25089

🚨 CVE-2026-25089 - Inyección Crítica de Comandos del SO en FortiSandbox 📖 Resumen CVE-2026-25089 es una vulnerabilidad crítica de Inyección de Comandos del SO CWE-78 que afecta a múltiples despliegues de Fortinet FortiSandbox. Un atacante remoto no autenticado puede explotar esta falla enviando...

CVE-2026-0006-openapv-poc

CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch Analysis & Reproduction by Mobile Hacking Lab CVSS 9.8 Critical | Actively exploited in the wild | Patched March 2026 Note: We did not discover this vulnerability. All credit for finding and responsibly reporting...

CVE-2022-42092

CVE-2022-42092 Python Exploit 🔥 Description This Python exploit script targets an unrestricted file upload in Backdrop CMS to achieve a Remote Code Execution RCE. ⚠️ Affected Versions Version 1.22.0 and prior version Note: Backdrop CMS disputes this and argues that advanced permissions are...

CVE-2024-27348-Apache-HugeGraph-RCE

Vulnerabilidad de Ejecución Remota de Código en Apache HugeGraph Server CVE-2024–27348 CVE-2024-27348 es una vulnerabilidad crítica de Ejecución Remota de Comandos RCE en Apache HugeGraph Server, un popular sistema de base de datos de grafos. La falla reside en la interfaz del lenguaje de recorri...

CVE-2026-0740

CVE-2026-0740 Ninja Forms File Uploads = 3.3.26 - Unauthenticated Arbitrary File Upload to RCE Exploit for CVE-2026-0740 discovered by Selim Lanouar whattheslime. For a complete technical deep dive, read the full article on Lexfo's blog. Disclaimer This repository is provided for research and...

CVE-2022-29464

WSO2 Arbitrary File Upload to Remote Command Execution RCE https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1738 Example python3 exploit.py https://target.org:9443 shell.jsp...

AEMPWN

AEMPWN AEM Forms Scanner for CVE-2025-54253 & CVE-2025-54254 AEMPWN is a targeted scanner for identifying high-risk Adobe Experience Manager AEM Forms vulnerabilities, with support for safe detection, blind out-of-band OOB confirmation, and full proof-of-concept PoC validation workflows. This too...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2026-82531

Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocachehash is never restored during extends:/multi-component template inheritance, leaving it null. Attackers can supply assigned data containing a forged SmartyNocache marker that is copied...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit Para explotar la vulnerabilidad, es necesario levantar un contenedor docker con un ambiente preparado para levantar Tensorflow con una versión 2.2.3 la cual todavía tiene la vulnerabilidad. Consta de: Una arquitectura AMD de 64 bits, CPU o GPU que puede ejecutar instruccion...

CVE-2022-21445-for-12.2.1.3.0-Weblogic

Vista general CVE-2022-21445 puntuación CVSS 9.8, la vulnerabilidad es una deserialización de datos no confiables, identificada como existente en el componente ADF Faces, que puede ser explotada de forma remota sin autenticación pre-authentication para ejecutar RCE. La vulnerabilidad fue...

Spring4Shell-POC

Spring4Shell-POC Proceso de replicación local de la vulnerabilidad Spring4Shell Preparación del entorno Entorno: docker、docker-compose Empaquetar con mvn, generar ./target/ROOT.warshell mvn package Iniciar servicioshell docker-compose up -d Detener el servicioshell docker-compose down Procedimien...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

CVE-2013-2729

Adobe Reader BMP/RLE heap corruption - CVE-2013-2729 Adobe Reader X is a powerful software solution developed by Adobe Systems to view, create, manipulate, print and manage files in Portable Document Format PDF. Since version 10 it includes the Protected Mode, a sandbox technology similar to the...

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...