584940 matches found
LetsDefend-SOC173-Follina-0-Day-Detected
LetsDefend-SOC173-Follina-0-Day-Detected We are presented with a security alert indicating the detection of the Follina CVE-2022-30190 vulnerability. A malicious Word document triggered msdt.exe execution, suggesting possible remote code execution on the host JonasPRD. Our task is to investigate...
CVE-2025-39538
π‘οΈ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...
CVE-2023-2636
CVE-2023-2636...
CHIRP-CodeExecution_via_Malicious_ImageFile
CHIRP β Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...
CVE-2022-24112
CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE nuclei template: CVE-2022-24112.yaml The essence of this vulnerability is similar to CVE-2021-45232, both bypass authorization or are unauthenticated, to execute malicious filterfunc or script in a route to execute commands...
CVE-2026-42945_NginxRift
π NGINX Rift PoC Automation β CVE-2026-42945 PoC Automation Driver for RCE exploitation of thenginx-rift container Β· Target verification β Single-command exploit β Interactive reverse shell One command orchestrates the entire exploit flow β from container check to getting a shell. β οΈ Ethical &...
Chakra-CVE-2019-0567
Chakra-CVE-2019-0567 A POC of a type confusion bug in chakracore framework that leads to code execute. Following from Connor McGar's blog https://connormcgarr.github.io/ NOTE: The Offsets and ROP gadgets depends on the Windows version you use, so it might not work for you. If you compare my code ...
CVE-2019-9202
CVE-2019-9202 Nagios IM 2.6 remote code execution exploit: CSRF + SQLi + RCE + LPE -- remote root Description By chaining a Cross-Site Request Forgery CSRF / authorization bypass CVE-2019-9203 it is possible to exploit a Union-based SQL injection CVE-2019-9204, a Remote Code Execution RCE...
CVE-2020-16947
CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details...
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell Introduction I went into a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend lab. I mimicked a real-world zero-day attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection key...
UltraRealy_with_CVE-2019-1040
UltraRelay Updated by Lazaar Sami for the exploit CVE-2019-1040 UltraRelay is a tool for LLMNR poisoning and relaying NTLM credentials. It is based on Responder and impack. I have updated the original version https://github.com/5alt/ultrarelay for the exploit CVE-2019-1040. Dirk-jan Mollema has...
CVE-2025-68613
π n8n Authenticated RCE PoC Pocsuite3 CVE ID : CVE-2025-68613 Type : Authenticated Remote Code Execution Framework : Pocsuite3 This is a vulnerability verification and exploitation script based on the Pocsuite3 framework, used to detect the authenticated remote code execution RCE vulnerability in...
CVE-2026-Discord
Critical Vulnerability Report: Discord macOS Client Date : 2026-01-25 Target : Discord Client macOS Stable 0.0.373 Author : Antigravity π¨ Executive Summary We have identified a critical security vulnerability in the Discord macOS Client Electron-based involving the forced exposure of the Remote...
langflow-rce-exploit
Langflow RCE Exploit CVE-2025-3248 Remote Code Execution Exploit for Langflow CVE-2025-3248 Features Automatic vulnerability detection Multiple exploitation modes: Interactive shell Single command execution Reverse shell connection File upload capability Colorized user interface Multiple reverse...
CVE-2023-51385_test
Verify CVE-2023-51385 First, add the following to /.ssh/config root@kitploit: δΈ»ζΊ .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Command injection exists in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar After...
CVE-2021-21972
CVE-2021-21972 Description The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts...
microsoft-diagcab-rce-poc
microsoft-diagcab-rce-poc Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution You can find the full advisory here: https://medium.com/@radimre83/the-trouble-with-microsofts-troubleshooters-6e32fc80b8bd...
PowerSploit
Forked to add a few features to PowerView.ps1 that I commonly perform manually This project is no longer supported PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment. PowerSploit is comprised of the following...
CVE-2025-51495
I would like to report a security vulnerability identified in the latest release of Mongoose v7.17. The issue resides in the WebSocket module, specifically within the mgwscb function responsible for handling incoming WebSocket frames. The function is vulnerable to an integer overflow, which may...
n8n-CVE-2025-68613
π₯ n8n CVE-2025-68613 β Remote Code Execution Research This repository contains full vulnerability research, exploitation methodology, detection engineering, and TryHackMe walkthrough for CVE-2025-68613 , a critical Remote Code Execution vulnerability in the n8n workflow automation platform. π CVE...