CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC This package allows: 1. Upload webshell to SharePoint 2. Extract ValidationKey 3. Generate signed ViewState 4. RCE via reverse/bind shell 🔧 Setup git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Running Upload the webshell From a SharePoint...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder = 2.5.1 - Local File Inclusion LFI Exploit Overview CVE-2025-2294 affects the Kubio AI Page Builder plugin for WordPress versions up to and including 2.5.1. It suffers from an unauthenticated Local File Inclusion LFI vulnerability via the...

CVE-2022-37209

CVE-2022-37209 CVE-2022-37209 POC Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...

CVE-2025-24813-PoC

CVE-2025-24813-PoC CVE-2025-24813 affects Apache Tomcat - if it's a vulnerable version and spectacularly misconfigured, an attacker can get RCE with one GET and one POST. More info here This is Yiheng An, Jun Li, Qiang Liu, Haozhe Zhang, Qi Deng's script from the recent writeup modified to accept...

CVE-2019-5736

Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. Tested only on Debian 9. No attempts...

AntimalwareBlight

Use this PowerShell module to execute PowerShell code at the antimalware-light protection level. This code was highlighted in the Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem REcon talk as well as Black Hat USA 2022. This module needs to run elevate...

CVE-2025-66478-PoC-Reverse-Shell

CVE-2025-66478 / CVE-2025-55182 "React2Shell" — RSC Server Actions Deserialization RCE PoC Proof-of-concept exploit for CVE-2025-55182 — publicly nicknamed "React2Shell" — a server-side prototype pollution vulnerability in React Server Components' Server Actions deserialization...

CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - Local File Inclusion LFI Vulnerability in Kubio AI Page Builder for WordPress 🧱 🔍 Overview CVE-2025-2294 is a critical 🔥 Local File Inclusion LFI vulnerability affecting the Kubio AI Page Builder plugin for WordPress versions up to and including 2.5.1. This flaw...

CVE-2017-5941-NodeJS-RCE

CVE-2017-5941-NodeJS-RCE https://paper.seebug.org/213/...

DogWalk-rce-poc

Dogwalk Proof-of-Concept🐾 🚨 Disclaimer 🚨 The PoC allows an attacker to obtain Remote Code Injection on a Windows victim device. The goal of this repo is to make a PoC even more usable than the initial repo. DO NOT USE IT WITHOUT PRIOR AUTHORIZATION! Regarding the damage caused and the simplicity ...

CVE-2021-41773-RedTeam

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE ITSOLERA Cybersecurity Department — Red Team Task 3 Team: Offensive Team Zeta Date: 18th March 2026 ⚠️ Disclaimer This repository is for educational purposes only. All testing was performed in an isolated local Docker lab. Never use...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details...

w48crash

WebMod Stack Buffer Overflow CVE-2007-1260 by cybermind Kevin Masterson [email protected] WebMod site archived: https://web.archive.org/web/20080517044559/http://djeyl.net/w.php Vulnerable versions: 0.48, both Win32 and Linux. Previous versions may be vulnerable. This should work with any...

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

mariana-trench

Mariana Trench Mariana Trench es una plataforma de análisis estático enfocada en seguridad dirigida a Android. Esta guía te guiará a través de la configuración de Mariana Trench en tu máquina y te llevará a encontrar tu primera vulnerabilidad de ejecución remota de código en una pequeña aplicació...

CVE-2026-19669

The Zephyr RTOS is vulnerable to a kernel stack overflow due to unbounded variable-length arrays (VLAs) in the z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() functions within drivers/fuel_gauge/fuel_gauge_syscall_handlers.c. An attacker can provide an unvalidated len argument via...

CVE-2026-19669 Unbounded variable-length array in fuel gauge syscall verifiers allows kernel stack overflow from user mode

The user-mode syscall verifiers zvrfyfuelgaugegetprops and zvrfyfuelgaugesetprops in drivers/fuelgauge/fuelgaugesyscallhandlers.c declared two variable-length arrays, union fuelgaugepropval kvalslen and fuelgaugepropt kpropslen, sized directly by the caller-supplied len argument. len is an...