CVE-2026-45659

CVE-2026-45659 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...

PoC-CVE-2024-23113

Disclaimer The code and materials contained in this repository are provided strictly for educational, research, and authorized security testing purposes. Prohibited Use Do not use this tool/code against any infrastructure, systems, or networks without explicit, prior written permission from the...

php-cve-2026-fix

php-cve-2026-fix A single Bash script that finds every PHP...

CVE-2025-7441

CVE-2025-7441 StoryChief 1.0.42 - Arbitrary File Upload Vulnerability CVE-2025-7441 - Technical summary Affected component: StoryChief WordPress plugin Vulnerability type: Unauthenticated arbitrary file upload Vulnerable endpoint: /wp-json/storychief/webhook Root cause: The plugin accepts a JSON...

CVE-2025-8971

CVE-2025-8971 SQL Injection Author: Byte Reaper Description : This exploit for CVE-2025-8971, a SQL injection vulnerability in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability exists in /admin/operations/travellers.php and can be exploited remotely via the val-username...

CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-The-Silent-Gateway-Risk Letting attackers run malicious code without needing a cracked password, user interaction, or even a foothold in your network. That’s CVE-2025-27480 It’s late you are running on red-bull we have all been there. You’re troubleshooting a production issue and...

prefect-cve-2026-5366

PoC: CVE-2026-5366 - Git Argument Injection in Prefect GitRepository Vulnerability: git argument injection leading to RCE via commitsha plus argument injection via directories Version: vulnerable in 3.6.23, fixed in 3.6.25+ File: src/prefect/runner/storage.py Huntr:...

cve-2010-2075-analysis

CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule Metric| Value ---|--- CVSS v4.0| 9.2 Critical CVSS v3.1| 8.1 High — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| 122 — Heap-based Buffer Overflow Introduced| June 2008 — v0.6.27 Discovered| April 2026 — DepthFirst Research...

nextjs-security-update

nextjs-security-update There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts. Uses the official Vercel fix tool under the hood. What happened Dec 11, 2025:...

libreoffice: libreoffice: Arbitrary code execution via remote Java database driver

A flaw was found in LibreOffice. When linking spreadsheet cell ranges to external data sources in Calc, a document can specify an external Java database driver. By convincing a user to open a specially crafted document, a remote attacker can force the application to download and execute untrusted...

Important: Red Hat Security Advisory: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shellscanner Non-destructive exposure assessment for C...

CVE-2026-6992-PoC

CVE-2026-6992-PoC Vulnerability proof of concept for the bluetooth pin RCE injection CVE-2026-6992 reworked from https://github.com/utmost3/cve/issues/2 I take no credit for discovering the vulnerability. This is for educational and portfolio purposes only. For devices that do not have management...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre-Auth RCE Chain SolarWinds Web Help Desk Pre-Auth RCE Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if SolarWinds Web Help Desk instance is vulnerable to CVE-2025-40552 and CVE-2025-4055...

cve-2025-29384

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...

CVE-2026-5718

CVE-2026-5718 CVE-2026-5718: Unauthenticated File Upload To RCE in DnD Upload CF7 Plugin CVE-2026-5718 — DnD CF7 File Upload RCE Scanner Plugin: Drag and Drop Multiple File Upload for Contact Form 7 Plugin Slug: drag-and-drop-multiple-file-upload-contact-form-7 CVE ID: CVE-2026-5718 CVSS Score: 8...

PHP-FPM Path Info Buffer Underflow - Remote Code Execution

In PHP-FPM before 7.1.33, 7.2.x before 7.2.24, and 7.3.x before 7.3.11, when deployed in certain Nginx configurations with the fastcgisplitpathinfo directive, a crafted request with an empty PATHINFO can trigger a buffer underflow in the php-fpm code. This may allow an unauthenticated remote...