655523 matches found
PUB-A-503505702
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
Debian dla-4875 : imagemagick - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4875 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4875-1 [email protected]...
PUB-A-539619693
In IMGvkCreateImageView of imageview.c, there is a possible way to trigger a use after free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CentOS Linux 6 [TuxCare] Security Update: cpio Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793167254)
The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793167254 advisory. - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create T...
CVE-2026-48907
CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension This tool is for educational and authorized testing purposes only. Use only on systems you own or have explicit permission to test The author is not responsible for any misuse or illegal activities Always obtain proper...
CVE-2022-36804-ReverseShell
Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...
Nostromo_Python3
Nostrom RCE Python3 Exploit Code: Usage: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...
cdt-vulnsamba-deploy
CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...
CVE-2018-11776-FIS
CVE-2018-11776 is a security vulnerability in Apache Struts, a popular framework for developing web applications. This vulnerability allows attackers to carry out remote attacks by injecting malicious code into data fields of HTTP requests. This vulnerability has been widely exploited in...
CVE-2022-46169
Cacti | Auth Bypass | RCE | CVE-2022-46169 Cacti: Unauthenticated Remote Code Execution Exploit in Ruby Cacti Docker This is a dockerized application that is vulnerable to the Cacti RCE vulnerability CVE-2022-46169. Follow the link to get Cacti running...
CVE-2025-3248
CVE-2025-3248 ā Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code š Exploit Features š Remote & unauthenticated RCE š No authentication required š Python3 one-liner script šØ Colorized terminal...
CVE-2022-24086-RCE-PoC
CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being āexploited in the wild in very limited attacksā received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...
CVE-2026-0770
CVE-2026-0770 Overview This tool is used to test the vulnerability CVE-2026-0770 in the Langflow application. It leverages the /api/v1/validate/code endpoint to perform Remote Code Execution RCE. Developer: Ohang Thanks to: @C4p333 Purpose: Security Research & Educational Use Installation Termux...
study-CVE-2025-55182
CVE-2025-55182 Study A repository for learning about the Remote Code Execution RCE vulnerability in React Server Components. š“ Warning For educational purposes only. Using it against others' systems without permission is illegal. š Vulnerability Overview Item| Description ---|--- CVE ID|...
CVE-2025-24813
šØ CVE-2025-24813 ā Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. š„ This exploit demonstrates how an attacker...
CVE-2017-7269-Echo-PoC
CVE-2017-7269 Remote Code Execution Echo Verification Our team's analysis report on the CVE-2017-7269 vulnerability: https://ht-sec.org/cve-2017-7269-vulnerabilities/ The default PoC only launches calc.exe. Now it has been modified to respond to requests. The command format is:...
CVE-2025-5548
š”ļø Analysis and Exploitation: CVE-2025-5548 Master in Cybersecurity | Module 6: Vulnerabilities š Hello! Welcome to my Analysis Workshop In this repository I document my practical immersion in binary-level vulnerability analysis and the development of exploits for Windows environments. The main...
MDaemon-Advisories
MDaemon-Advisories MDaemon Advisories: CVE-2021-27180 Reflected XSS CVE-2021-27181 CSRF Token Fixation CVE-2021-27182 Iframe injection CVE-2021-27183 Remote Code Execution Those vulnerabilities were already patched on January 2021 and are published for CVE purposes. They can be chained to achieve...
Better-CVE-2022-29464
Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...
mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE
CVE-2025-47175 - Microsoft PowerPoint Use-After-Free UAF Remote Code Execution PoC Overview This repository contains a Proof of Concept PoC exploit for the CVE-2025-47175 vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free UAF bug that allows an attacker to execute...