cve-2022-29464

cve-2022-29464 Descargo de responsabilidad El script es solo para fines de aprendizaje y referencia, no ataques de forma maliciosa los sitios web de otras personas Si se cometen actos ilegales o faltas a la disciplina, todas las consecuencias serán asumidas por el usuario La tecnología es inocent...

CVE-2018-7600

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2018-7600 - Day Started: 26/06/2024. Table of contents: 1. CVE summary 2. Prerequisites 3. CVE Analyse 4. Mitigation CVE summary An attacker could call a Drupal Form API Ajax Request containing the calluserfunc auto do function Drupal before 7.58,...

Stagefright-cve-2015-1538-1

Stagefright-cve-2015-1538-1 Discovered by Joshua J. Drake @jduck of ZIMPERIUM zLabs and fixed his project by Niranjan Shrestha @niranjanshr13. Exploit for RCE Vulnerability CVE-2015-1538 1 Integer Overflow in the libstagefright MP4 'stsc' atom handling Don't forget, the output of "createmp4" can ...

ore_react2shell_scanner

Rapticore Security Research - React2Shell Scanner A security assessment toolkit developed by the Rapticore Security Research Team for detecting React Server Components RSC vulnerabilities including CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability. Overview This toolkit...

CVE-2018-6789-Python3

CVE-2018-6789 Exim 4.90.1 Vulnerabilidad RCE Exim 4.90.1 Vulnerabilidad RCE remezcla para Python3 con argumentos pasados desde la línea de comandos Uso: python3 exim.py -t localhost -p 25 -lh 192.168.0.159 -lp 1337...

CVE-2025-55182-React2Shell-RCE

CVE-2025-55182 – React2Shell RCE GUI A modern, neon-themed GUI tool for security testing React2Shell CVE-2025-55182 on React Server Components / Next.js applications. Built with Python + CustomTkinter , it lets you: Check if a specific endpoint is vulnerable to React2Shell Run shell commands on...

CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

CVE-2025-24893 – Ejecución remota de código no autenticada en XWiki 0 Tabla de contenidos 1. Resumen 2. Detalles de la vulnerabilidad 3. Versiones afectadas 4. Prueba de concepto 4.1 Construir el payload 4.2 Explotación manual 4.3 Exploit automatizado en Python 5. Mitigación 6. Créditos y...

EUVD-2026-88074

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723

Google fuse-archive versions prior to 1.24 are vulnerable to an Untrusted Search Path (PATH Hijacking) . An attacker capable of prepending a directory to the PATH or writing a malicious binary to a writable directory within the PATH can hijack the execution pathway. This vulnerability allows for ...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE

CVE-2019-3980 – OpenNetAdmin 18.1.1 Ejecución Remota de Código ⚠️ Aviso legal Este repositorio está destinado estrictamente solo a fines educativos y de investigación. La información y el código aquí proporcionados pueden utilizarse en entornos controlados , como máquinas de laboratorio privadas...

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 Remote Code Execution via Profile Picture Upload Description A Remote Code Execution RCE vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php...

CVE-2025-32433

CVE-2025-32433 Introduction This document presents a study of the vulnerability CVE-2025-32433 , affecting the built-in SSH server implementation in the Erlang/OTP platform. This vulnerability is a Remote Code Execution RCE opportunity without authentication and affects several Erlang/OTP branche...

My-Exploits

My-Exploits Vulnerability research I have done on four widely deployed platform services: Keycloak, Apache NiFi, HashiCorp Vault and HashiCorp Nomad. For each finding this repo carries the write-once artifacts I actually use, a Metasploit module where it made sense, a standalone Python proof of...

CVE-2025-66478-Research-Proof-of-Concept

CVE-2025-66478-Research-Proof-of-Concept Overview This repository contains research and a proof-of-concept implementation related to CVE-2025-66478, a vulnerability affecting certain Next.js / React Server Components configurations. The project was developed in a controlled laboratory environment...

CVE-2017-5638

CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...

CVE-2024-11394

CVE-2024-11394 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious reformer trax...

Info-Sys-Security-CVE-2025-55182

CVE-2025-55182 Laboratorio de Seguridad "React2Shell" Este repositorio contiene un laboratorio académico local para analizar CVE-2025-55182 en un entorno controlado de React Server Components. El laboratorio simula la vulnerabilidad, su explotación y el parche aplicado. 📁 Estructura del Repositor...

Blackash-CVE-2025-55182

🚨 CVE-2025-55182 — Vulnerabilidad Crítica en React Server 🧠 ¿Qué Es? ⚛️ Una falla de seguridad crítica en React Server Components RSC 🧨 Causada por deserialización insegura 🌐 Explotable mediante peticiones de red 🔓 No requiere autenticación ☠️ Puede llevar a Ejecución Remota de Código RCE ✅ Esto...