594039 matches found
CVE-2023-54405
The H3C CVM (Cloud Virtualization Management) component of the H3C CAS cloud platform is vulnerable to an unauthenticated arbitrary file upload flaw in the /cas/fileUpload/upload endpoint. The root cause is the lack of restrictions on file types and the failure to sanitize the caller-supplied tok...
EUVD-2023-60704
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...
CVE-2023-54405 H3C CVM Unauthenticated File Upload via fileUpload/upload Token
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...
Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-
Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange For this lab, the goal was to practice triaging a well-known real-world vulnerability the way a security team might: reading the CVE details, understanding the CVSS score, and reasoning through how risky it actually is depending on the...
CVE-2025-2945
CVE-2025-2945 - pgAdmin4 Authenticated RCE Exploit Author: G0D150NE Version: 2.0.0 CVE: CVE-2025-2945 Severity: Critical CVSS 9.9 📌 Description Exploit for pgAdmin4 Remote Code Execution RCE vulnerability affecting versions 8.10 to 9.1. The vulnerability exists in the /sqleditor/querytool/downloa...
Triage-CVE-2017-0144
Triage: CVE-2017-0144 EternalBlue / SMBv1 — associated with WannaCry spread For this lab, the goal was to triage another well-known real-world vulnerability, this time EternalBlue, the SMBv1 flaw that was famously exploited by the WannaCry ransomware outbreak. Step 1: Open the CVE in NVD I went t...
CVE-2025-5781
FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...
CVE-2026-59265
A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...
Triage-CVE-2021-44228-Log4Shell-Log4j-
Triage: CVE-2021-44228 Log4Shell / Log4j For this lab, the goal was to triage another well-known real-world vulnerability, Log4Shell, one of the most widely exploited vulnerabilities in recent years due to how common the affected library was across enterprise software. Step 1: Open the CVE in NVD...
[SECURITY] [DSA 6540-1] radsecproxy security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6540-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...
CVE-2022-35914-RCE
CVE-2022-35914 by cyb3rk0ala PoC for CVE-2022-35914 , a command-injection vulnerability involving the htmLawed test component in vulnerable GLPI installations. The tool provides command execution through the vulnerable endpoint and includes optional callback functionality for authorized lab...
CVE-2019-10392_EXP
CVE-2019-10392EXP Jenkins Git Client Authenticated RCE CVE-2019-10392Exp Usage usage: Jenkins Git Client 2.8.2. -h -u TARGET -U USERNAME -P PASSWORD -i ITEM -I INTERACTIVE -c COMMAND optional arguments: -h, --help show this help message and exit -u TARGET, --target TARGET Target. -U USERNAME,...
cve-disclosures
Раскрытие CVE — Aman Bahiniya Три CVE, присвоенные MITRE в декабре 2024 года. Записи были зарезервированы, но так и не опубликованы, поэтому пока ничего не проиндексировано. Этот репозиторий публикует бюллетени, чтобы CVE стали доступны для поиска и получили авторство. CVE| Продукт| Тип ---|---|-...
CVE-2026-10036-speechbrain-rce
CVE-2026-10036: SpeechBrain — произвольное выполнение кода через парсинг CKPT.yaml Серьёзность: Высокая, CVSS 4.0 8.7 , CVSS 3.1 8.8 присвоено VulnCheck, CNA Вектор v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Вектор v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...
CVE-2023-4596
CVE-2023-4596 PoC Script for CVE-2023-4596, unauthenticated Remote Command Execution through arbitrary file uploads. Video of PoC being used Nuclei Template News article WordFence NVD Nist Summary A critical vulnerability has been discovered in the WordPress plugin Forminator, which enables an...
PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability
PoC-и-yara-правила-для-CVE-2025-59528-Flowise-имеет-уязвимость-удалённого-выполнения-кода ПРАВОВОЙ ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ И УСЛОВИЯ ИСПОЛЬЗОВАНИЯ Предоставленный в этом документе код Proof of Concept PoC и техническая информация предназначены исключительно для образовательных целей, академическ...
Project-CVE-2025-54068
Livewire2025CVE Сканер Livewire CVE-2025-54068 Автоматизированный сканер уязвимостей для обнаружения CVE-2025-54068 в приложениях Laravel, использующих Livewire v3.0.0-beta.1 — v3.6.3. Обзор Этот инструмент сканирует список веб-сайтов на наличие признаков критической уязвимости удалённого...
fastjson-cve
Проект воспроизведения CVE-2026-16723 Обзор Этот проект воспроизводит CVE-2026-16723 — критическую уязвимость удалённого выполнения кода RCE в fastjson 1.2.68 – 1.2.83. Уязвимость позволяет выполнить RCE при конфигурации по умолчанию без необходимости включения AutoType или наличия готовых гаджет...
CVE-2025-59528-PoC
CVE-2025-59528 PoC Proof of Concept for researching CVE-2025-59528 in an isolated laboratory environment. !WARNING DISCLAIMER This project is intended strictly for educational purposes, security research, and testing systems that you own or have explicit authorization to test. Do not use this PoC...
