SimpleHelp <= 5.5.7 - Arbitrary File Upload

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user. This template is a...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

Apache Unomi - Remote Code Execution

Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process, enabling attackers to execute arbitrary code. id: CVE-2020-11975 info: name: Apache Unomi -...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution

Monsta FTP = 2.11 contains an unrestricted file upload vulnerability caused by lack of authentication on file uploads, letting unauthenticated attackers execute arbitrary code by uploading crafted files. id: CVE-2025-34299 info: name: Monsta FTP = 2.11.2 - Unauthenticated Remote Code Execution...

Schneider Electric U.motion Builder - Remote Code Execution

U.motion Builder 1.3.4 contains a remote code execution vulnerability caused by improper input sanitization, allowing attackers to execute arbitrary system commands through crafted input parameters. id: CVE-2018-7841 info: name: Schneider Electric U.motion Builder - Remote Code Execution author:...

Oracle Identity Manager REST WebServices - Authentication Bypass

Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: REST WebServices. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager...

XStream <1.4.6/1.4.10 - Remote Code Execution

Xstream API before 1.4.6 and 1.4.10 is susceptible to remote code execution. If the security framework has not been initialized, an attacker can run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. This can allow an attacker to...

cve-2021-44228-rce-poc

PoC de Ejecución Remota de Comandos CVE-2021-44228 Este repositorio permite a los investigadores de seguridad experimentar con la ejecución remota de código ofreciendo una implementación de un servidor de ataque que carga un exploit personalizado en una aplicación vulnerable que contiene log4j. ⚠️...

mcpjam-to-root

⚠️ Disclaimer This repository is intended for authorized security research, penetration testing, and educational purposes only. Do not use the techniques described here against systems without explicit authorization. ⚡ MCPJam → Root From MCPJam Inspector RCE to root — CVE-2026-23744, JupyterLab...

CVE-2025-5961

🚨 Migración, Copia de seguridad, Staging – WPvivid Backup & Migration 📈 Esta vulnerabilidad afecta a un plugin con más de700,000+ instalaciones 📝 Detalles del CVE CVE: CVE-2025-5961 CVSS: 7.2 Alta Publicado: 3 de julio de 2025 🔍 Descripción El plugin Migration, Backup, Staging – WPvivid Backup &...

log4j-exploit-fork-bomb

log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: example of launching a fork bomb on a remote server due to vulnerability CVE-2021-44228 1. Create an attacker's LDAP server server module that will serve string and code payloads payload module 2. Create a victim example victim module and pass a...

CVE-2021-29003

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ Exploit db https://www.exploit-db.com/exploits/49764 medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Script de explotación de Shellshock 🎯💻🔍 Este script de Python explota la vulnerabilidad Shellshock CVE-2014-6271 para ejecutar comandos de forma remota o establecer una shell inversa en un objetivo vulnerable. 🛠️⚠️ ⚠ Aviso legal 🚨❗ Este script está destinado únicamente a...

CVE-2022-30190

CVE-2022-30190 también conocido como Follina Descripción de la vulnerabilidad Follina se encuentra en la herramienta de diagnóstico de soporte de Microsoft Microsoft Support Diagnostic Tool, MSDT. Cuando una aplicación llama a MSDT a través de un protocolo URL para obtener soporte, se produce una...

CVE-2017-16082

CVE-2017-16082 Descripción general Las versiones afectadas de pg contienen una vulnerabilidad de ejecución remota de código que ocurre cuando la base de datos remota o la consulta especifica un nombre de columna manipulado. Existen dos escenarios específicos en los que es probable que una...

CVE-2025-55182

CVE-2025-55182 Guía de Reproducción de RCE en Next.js Descargo de responsabilidad ⚠️ Esta herramienta es solo para fines de investigación de seguridad y enseñanza. No la utilice para actividades ilegales. ⚠️ Resumen de la vulnerabilidad CVE-2025-55182 es una vulnerabilidad grave de ejecución remota...

CVE-2024-38856-Apache-OFBiz

CVE-2024-38856 — Apache OFBiz Documentación del repositorio Propósito del repositorio: documentación informativa sobre CVE-2024-38856 autorización incorrecta / RCE pre-autenticación en Apache OFBiz. Este repositorio no contiene código de exploit armado. Está destinado únicamente a investigación...

CVE-2026-10795-Lab

CVE Lab: CVE-2026-10795 - UpdraftPlus UpdraftCentral RPC Authentication Bypass Chained to Plugin Installation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-10795, an unauthenticated authentication bypass vulnerability affecting the UpdraftPl...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...