CVE-2025-54123-Poc

CVE-2025-54123 Exploit Hoverfly Authenticated Middleware Command Injection RCE | CVSS 9.8 CRITICAL Vulnerability Hoverfly = 1.11.3 is vulnerable to authenticated command injection through the /api/v2/hoverfly/middleware endpoint. Admin credentials are required, but once authenticated, the...

CVE-2026-55200

CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability Critical Pre-Authentication Memory Corruption Vulnerability in libssh2 Overview...

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Polyglot Payload In the last weeks in November 2025, an interesting vulnerability CVE-2025-64512 was disclosed in pdfminer.six, a popular Python project to process PDF files, used in particular in AI pipelines. The vulnerability enables remote code execution by deserializing...

CVE-2025-3052

🐞 CVE-2025-3052：IhisiParamBuffer 内存破坏 本仓库集中整理了与 CVE-2025-3052 相关的研究资料。该漏洞是一个存在于使用微软第三方证书签名的 UEFI 模块中的内存破坏漏洞，攻击者可借此破坏安全关键的固件结构、使 Secure Boot 强制机制失效，并在操作系统加载之前执行任意未签名代码。仓库内容包括对根本原因和利用技术的技术分析、真实世界与教学用的易受攻击二进制文件，以及辅助文档，旨在帮助研究人员理解、复现并实验此类漏洞。 📑 目录 原始发现与官方参考 易受攻击的二进制文件（真实世界 / 教学用） 漏洞概述（分析、利用、PoC） 📂 Secu...

CVE-2023-6019

CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...

spring4shell-poc

Spring4Shell POC 漏洞描述：https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html POC 构建：https://github.com/BobTheShoplifter/Spring4Shell-POC 构建/运行步骤 已在 JDK 11.0.14、Spring Boot 2.6.5 和 Apache Tomcat 9.0.60 上测试通过 运行 mvn clean package 构建应用程序 将 demo-0.0.1-SNAPSHOT.war 重命名为...

cve-2022-36804

Atlassian Bitbucket RCE PoC - CVE-2022-36804 This repo contains a simple PoC script for Atlassian Bitbucket's remove code execution vulnerability. You can simply run this script via following commands: root@kitploit: echo 'bitbucket.redacted.com' | python3 cve-2022-36804.py Or you can create a...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and Do not rely on a current Java version to save you. Update Log4 or remove the JNDI lookup. Disable the expansion seems a pretty bad idea anyways. Bypass rc1...

CVE-2025-25257

CVE-2025-25257 - FortiWeb Vulnerability Checker & Exploit A Python-based tool for checking and exploiting CVE-2025-25257 vulnerability in FortiWeb devices. This vulnerability allows SQL injection and remote code execution through a crafted Authorization header. 📋 Description CVE-2025-25257 is a...

CVE-2020-28032_PoC

CVE-2020-28032PoC PoC for CVE-2020-28032 It's just a POP chain in WordPress RequestsUtilityFilteredIterator Object callback:protected = system storage:ArrayIterator:private = Array 0 = id uid=1000nth347 gid=1000nth347...

hack-winrar

hack-winrar WinRar is a very widely known software for windows. Previous version of WinRaR was a vulnerability which has been patched in Feb-2019. Most of the people didn't update winrar so they are vulnerable in this Absolute Path Traversal bug CVE-2018-20250 exp for Extracting Code Execution Fr...

THM-MagnusBilling-CVE-2023-30258-Exploit

THM-MagnusBilling-CVE-2023-30258 ⸻ 🛡️ MagnusBilling RCE → Root CVE-2023-30258 📌 Overview • Target: 10.145.148.203 • Platform: TryHackMe • Vulnerability: CVE-2023-30258 • Access: Unauthenticated Remote Code Execution RCE • Privilege Escalation: fail2ban misconfiguration • Final Access: Root ⸻ 🔍 1...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

CVE-2026-25243-debugfree

CVE-2026-25243 — DEBUG-free Redis RCE private Reliable remote code execution from a single crafted RESTORE on jemalloc Redis — noDEBUG command, no /proc, no gdb, no ROP, ASLR on. Runs the attacker's command as the redis process root in default images. 🔒 Private repository — authorized security...

CVE-2021-22204

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded proof-of-concept for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 that allows arbitrary code execution when processing malicious DjVu files. Credit This is derivative work. The vulnerability and the original...

CVE-2021-3129

CVE-2021-3129 — Laravel Ignition 远程代码执行 CVSS 9.8（严重） | 不安全的文件操作 → 日志投毒 → Phar 反序列化 → RCE 概述 Laravel Ignition -c "whoami" 参考 NVD — CVE-2021-3129 Ignition 补丁 2.5.2...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution RCE CVE-2026-34197 is a high severity Remote Code Execution RCE vulnerability affecting Apache ActiveMQ Classic. The issue exists within the Jolokia JMX-HTTP bridge, which exposes management operations over HTTP through the...

CVE-2026-60004-PoC

CVE-2026-60004: Ejecución remota de código en la API Diffpatch de Gitea !WARNING Este repositorio está destinado exclusivamente a la investigación de seguridad autorizada y a pruebas de laboratorio controladas. No ejecute la prueba de concepto contra sistemas que no posea o para los que no tenga...

CVE-2018-14667_Lab_POC

CVE-2018-14667-Lab 实验前提条件 演示应用来自：http://downloads.jboss.org/richfaces/releases/3.3.X/3.3.4.Final/richfaces-examples-3.3.4.Final.zip Jboss 5.1.0.GA 来自 JBOSS 下载存档：https://repository.jboss.org/sourceforge/ Jdk-6u45-linux-x64 来自 JAVA...

CVE-2020-13671-old

CVE-2020-13671 通过文件上传实现 RCE — Drupal 核心 软件： Drupal Core 8.7.5（受影响版本：7.x 7.78、8.x 8.8.11、8.9.x 8.9.9、9.0.x 9.0.8） CVSS： 8.8（高危） CWE： CWE-434 — 危险类型文件的无限制上传 CISA KEV： 是 — 已知被利用漏洞 公告： SA-CORE-2020-012 什么是 Drupal Drupal 是一个用 PHP 编写的开源内容管理系统（CMS），与 WordPress 或 Joomla 类似，但更倾向于构建更复杂的系统——企业级网站、多语言平台。Drup...