631774 matches found
CVE-2024-6333
CVE-2024-6333 - Xerox Authenticated Remote Code Execution Authenticated Remote Code Execution vulnerability in Xerox WorkCentre printers via the Network Troubleshooting Log feature. Description The Network Troubleshooting Log functionality /properties/security/networktroubleshootinglog.php fails ...
CVE-2025-32432
CVE-2025-32432 - Craft CMS Unauthenticated RCE PoC Working proof-of-concept for CVE-2025-32432 , an unauthenticated remote code execution vulnerability in Craft CMS versions up to and including 5.6.16 also affects 4.x and 3.x trees on equivalent code paths. Search keywords: CVE-2025-32432, Craft...
CVE-2024-45519-Zimbra-Real-Fix
CVE-2024-45519-Zimbra-Real-Fix Zimbra CVE-2024-45519 real fix - Official patch is incomplete CVE-2024-45519 - Zimbra Real Fix ⚠️ Warning CVE-2024-45519 is a critical RCE vulnerability CVSS 9.8 in Zimbra Collaboration Suite. Many administrators think they are not protected after applying the...
cve-2026-27483-lab
CVE-2026-27483 Lab - Enterprise Vulnerability Learning Environment A complete, realistic, enterprise-style Docker-based lab for learning, testing, and defending against CVE-2026-27483 MindsDB Path Traversal → RCE. This repository provides a deployable lab topology, configs, minimal container...
CVE-2022-22947
CVE-2022-22947 Introduction to CVE-2022-22947 Spring Cloud Gateway Remote Code Execution Vulnerability CVE-2022-22947 occurs in the Actuator endpoint of Spring Cloud Gateway applications. When enabled, publicly exposed, and insecure, it is susceptible to code injection. Attackers can exploit this...
CVE-2025-24813-Exploit
CVE-2025-24813-Exploit Apache Tomcat Remote Code Execution RCE Exploit - CVE-2025-24813 🚀 Apache Tomcat RCE Exploit - CVE-2025-24813 🔥 Exploit & Detection Tool for Apache Tomcat RCE CVE-2025-24813 This repository contains a PoC Proof of Concept exploit for the Apache Tomcat Remote Code Execution...
CVE-2025-32463
Vulnerability Overview CVE-2025-32463 affects Sudo versions 1.9.14 through 1.9.16 fixed in 1.9.17p1. When Sudo is invoked with the --chroot option, it may load configuration from an attacker-controlled path, leading to arbitrary code execution and privilege escalation to root. Usage: python3...
CVE-2018-6574-go-get-RCE
CVE-2018-6574-Solution gcc -shared -o attack.so -fPIC attack.c...
pwnacle-fusion
pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...
CVE-2026-59827
CVE-2026-59827: Metabase Unsafe Deserialization in H2 Native Queries Severity: Critical CVSS 9.9 CVE: CVE-2026-59827 Advisory: GHSA-w95f-x9v9-wv36 Reporter: Matheus Gutierre @Gutierre0x80 Published: June 30, 2026 Vulnerability Summary An authenticated user with access to native SQL queries on an ...
CVE-2026-3288
CVE-2026-3288: ingress-nginx Configuration Injection via rewrite-target Annotation Keywords: CVE-2026-3288, ingress-nginx vulnerability, Kubernetes security, nginx configuration injection, rewrite-target annotation, RCE, Secret disclosure, CWE-20, CAPEC-176, ingress-nginx CVE 2026, Kubernetes...
CVE-2024-28397-exploit
js2py Sandbox Escape CVE-2024-28397 Exploit for remote command execution RCE via sandbox escape in js2py = 0.74. Allows arbitrary code execution on the host system through insecure JavaScript evaluation. Vulnerability CVE : CVE-2024-28397 Component : js2py Affected versions : = 0.74 Impact : Remo...
js2py-Sandbox-Escape-CVE-2024-28397-RCE
CVE-2024-28397 js2py Sandbox Escape Exploit A collection of exploit scripts targeting the js2py sandbox escape vulnerability CVE-2024-28397 that allows arbitrary code execution through Python object introspection. 🔍 Vulnerability Overview The js2py library contains a critical sandbox escape...
WG-CVE-2026-1555-Linux
██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝ ╚═════╝ ╚═══╝...
CVE-2025-24813-PoC
CVE-2025-24813 – Proof of Concept 📖 Overview This repository contains a Proof of Concept PoC for CVE-2025-24813 , a vulnerability affecting affected software/product name here – update based on advisory. The PoC demonstrates the issue in a safe and reproducible way , to help researchers, defender...
CVE-2025-4427-CVE-2025-4428
CVE-2025-4428 & CVE-2025-4427 CVE-2025-4428 is a post-auth remote code execution vulnerability in EPMM's DeviceFeatureUsageReportQueryRequestValidator. It arises from the unsafe handling of user-supplied input within error messages processed via Spring’s AbstractMessageSource, which allows...
CVE-2023-34468
CVE-2023-34468 — Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC Short Python PoC for abusing an editable Apache NiFi ExecuteSQL processor with an H2 RUNSCRIPT payload to trigger remote command execution through a Bash reverse shell. For authorized testing and research only. Do not use against system...
CVE-2025-27480
CVE-2025-27480 CVE‑2025‑27480 – Remote Code Execution in OpenSSH What the vulnerability is all about OpenSSH version 8.9p1 contains a subtle buffer‑overflow bug that happens when it parses an SSHUSERAUTH packet. A client can send a packet with a very long “user” field, and the data lands in the...
CVE-2017-14980
Exploit-CVE-2017-14980 PoC exploit for CVE-2017-14980 — a stack-based buffer overflow vulnerability in Sync Breeze Enterprise 10.0.28. 📖 Full technical analysis of the exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ About This repository contains a proof-of-concept PoC developed...
