CVE-2026-23830-SandBreak

SandBreak Generador de Exploits CVE-2026-23830 y Herramienta Auto-Pwn SandBreak es una herramienta robusta de generación de exploits basada en Go, diseñada para aprovechar la vulnerabilidad de escape de SandboxJS CVE-2026-23830. Esta herramienta explota el constructor AsyncFunction sin protección...

EpSiLoNPoInTlnk

README EpSiLoNPoInTlnk CVE-2026-21510 - Generador de .LNK Herramienta para la generación de archivos .lnk que utilizan la vulnerabilidad CVE-2026-21510 Windows ShellLink Remote Code Execution. Diseñada para la investigación en seguridad ofensiva, pruebas de penetración autorizadas y análisis de...

CVE-2026-24061-telnet2root

Escáner y Exploit de Vulnerabilidad CVE-2026-24061 👨‍💻 Autor: Furkan KAYAPINAR @FurkanKAYAPINAR Descripción general Este repositorio contiene un escáner de vulnerabilidades y un exploit interactivo para CVE-2026-24061. Esta vulnerabilidad afecta a inetutils-telnetd y potencialmente a otras...

CVE-2025-59287

CVE-2025-59287 WSUS CVE-2025-59287 – Deserialización XML RCE Reverse Shell Un PoC enfocado para explotar WSUS CVE-2025-59287 mediante deserialización XML para lograr una reverse shell de Windows. Este script solo admite un payload de reverse shell sin fallback de calc. Objetivo: Windows Server co...

CVE-2024-38856_Scen

CVE-2024-38856Scen Solo para uso ético, no se permite ninguna actividad dañina o maliciosa. Y es bajo su propia responsabilidad. CVE-2024-38856: Escáner y explotación de ejecución remota de código en Apache OFBiz. Este problema afecta a Apache OFBiz: hasta 18.12.14...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Lectura Arbitraria de Archivos → Robo de SECRETKEYBASE → RCE Resumen CVE-2026-66066 es una cadena de severidad crítica CVSS 9.5 de lectura arbitraria de archivos previa a la autenticación hasta ejecución remota de código en Ruby on...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - Exploit de LFI y RCE Información Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49...

Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection

Repositorio de Ingeniería de Detección CVE-2025-25257 Resumen Este repositorio proporciona contenido de ingeniería de detección listo para producción para CVE-2025-25257 , una vulnerabilidad de inyección SQL sin autenticación previa en Fortinet FortiWeb Fabric Connector versiones 7.0 a 7.6.x. La...

React2Shell-PoC-CVE-2025-55182

React2Shell Exploitation Simulation CVE-2025-55182 Note: This document is for educational and security research purposes only. Do not use it to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability...

CVE-2025-55182-Auto-Scanner

CVE-2025-55182 Scanner is a high-performance tool for detecting vulnerable Next.js Server Action endpoints. It uses multi-threaded scanning, confidence-based detection, and multiple response indicators to identify potential Remote Code Execution RCE vulnerabilities. Features - High-speed concurre...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Stack-Based Buffer Overflow x86 and x64 Stack-based buffer overflow in R 3.4.4. Full exploitation on x86, but only RIP control with gadget analysis on x64 due to program constraints. The same vulnerability across two architectures, leading to different exploitation...

vsftpd2.3.4-backdoor-exploit

vsftp2.3.4-backdoor-exploit vsftpd 2.3.4 Backdoor Exploit CVE-2011-2523 Requirements Python 3.11+ recommended psutil Python package Installation Windows 1. Make sure Python is installed: py --version 2. Install dependencies: py -m pip install psutil 3. Run the script: py vsftpd234backdoor.py macO...

cve-2026-0013-exploit

This repository does not have a README...

CVE-2025-32433-available-for-windows

CVE-2025-32433 Information about the vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server. options: -h, --help...

CVE-2019-11043

CVE-2019–11043: PHP-FPM Nginx Remote Code Execution Vulnerability Vulnerability Description and Impact CVE-2019–11043 is a remote code execution RCE vulnerability. It affects PHP-FPM, which is a FastCGI Process Manager that is commonly used with Nginx web servers. The flaw arises from inadequate...

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

CVE-2026-95349

A flaw was found in chromium-browser. A buffer overflow vulnerability in the WebGL Web Graphics Library component allows a remote attacker to execute arbitrary code outside the browser sandbox. By tricking a user into visiting a specially crafted HTML page, an attacker can corrupt memory and...

CVE-2026-95318

A flaw was found in chromium-browser. A buffer overflow vulnerability in the Video component allows a remote attacker to potentially execute arbitrary code outside the browser sandbox. To exploit this vulnerability, an attacker must trick a user into viewing a specially crafted HTML page...

CVE-2026-95350

A flaw was found in the ANGLE Almost Native Graphics Layer Engine component of Chromium. A remote attacker could exploit this buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code outside the...

CVE-2026-95280

A flaw was found in chromium-browser. Arbitrary code execution within the browser's restricted security environment sandbox is possible due to a race condition in the V8 JavaScript engine. A remote attacker can exploit this vulnerability by enticing a user to visit a specially crafted web page...