Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC for CVE-2024-30085 Proof of Concept exploit for the CVE-2024-30085 privilege escalation vulnerability. For educational and security research purposes only. ⚠️ Legal Warning FOR EDUCATIONAL USE ONLY ✅ Authorized security research ✅ Controlled laboratories ✅ Cybersecurity education ❌...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Pending: Path Traversal in Flask-Uploads Vulnerability Information Product : Flask-Uploads Version : 0.2.1 and potentially older versions Vulnerability Type : Path Traversal Directory Traversal CWE-ID : CWE-22 Severity : HIGH CVSS 7.5 Impact : Arbitrary File Write, Remote Code...

CVE-2026-Pending-Claude-Desktop-RCE

Este repositorio no tiene un README...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...

CVE-2025-12189

Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents = 7.10.1321 - Cross-Site Request Forgery to Arbitrary File Upload The Bread & Butter IO plugin contains a vulnerability in its image upload functionality that allows any attacker to trick authenticate...

CVE-2025-11953-PoC

Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...

CVE-2024-48990

PoC for CVE-2024-48990 CVE-2024-48990 is a local privilege escalation vulnerability found in the needrestart utility. The vuln exists in versions prior to 3.8. The service, which runs as root during events like package installations, insecurely scans all running processes. When it finds a Python...

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Practical Exploitation Lab for Apache Camel 🔍 Overview CVE-2025-27636 is a critical Remote Code Execution RCE vulnerability in Apache Camel , specifically in the camel-exec component. It stems from a subtle but dangerous issue: TheDefaultHeaderFilterStrategy performs...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 This repository contains a proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress plugin, leading to remote...

CVE-2024-24401

Vulnerability Report CVE Disovered DESIGNED TO BE RUN ON KALI LINUX Notes Nagios has patched version 2024R1.0.1 in all recent downloads. To determine if a target is vulnerable, ensure they are using an older download of 2024R1.0.1. The updated script checks to make sure that the target system is...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a chain of database manipulation and scheduled task execution, achieve remote...

CVE-2026-17544

CVE-2026-17544 — PHP bcmath 越界写入 → 通用纯内存 RCE 针对 CVE-2026-17544 的武器化概念验证，该漏洞是 PHP 重写的 bcmath 扩展（bcstr2num）中的越界写入。它将公开已知的仅 DoS 崩溃转化为一个完整、通用、纯内存的远程代码执行原语 ，同时绕过 disablefunctions 和 openbasedir。 仅限授权研究/教育用途。 仅可对您拥有 或明确获准测试的系统运行。 太长不看 Bug： bcstr2num 在手动设置 scale 时截断小数部分，重新去除尾随零，但未更新...

CVE-2026-27876

🚨 CVE-2026-27876 - Grafana Critical RCE via SQL Expressions A chained vulnerability allowing arbitrary file writes through SQL Expressions, leading to full Remote Code Execution RCE on the host. 📋 Overview CVE ID : CVE-2026-27876 Severity : Critical CVSS v3.1: 9.1 Published : March 27, 2026 CWE :...

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 Acerca de la Vulnerabilidad React2Shell es una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta: Target| Versión Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1,...

CVE-2026-3854-PoC

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injection For educational and authorized security research purposes only. Do not use against any system without explicit written permission. Overview CVE-2026-3854 is a Remote Code Execution vulnerability in GitHub Enterprise Server's and...

NSE_CVE-2025-55182

NSECVE-2025-55182 Nmap NSE script for scanning React2Shell CVE-2025-55182 Disclaimer The following code is provided for educational and research purposes only. Any use of this script is solely at the discretion and responsibility of the user. This scanner may produce false positives or inconclusi...

cve-2026-42945

CVE-2026-42945 — NGINX 重写堆溢出：分析、DoS 与署名 RCE 移植 针对 CVE-2026-42945 （CVSS 4.0 9.2 严重 ）的安全研究：NGINX 脚本引擎中的堆缓冲区溢出，其中替换部分带参数的 rewrite（例如 rewrite ^. /new?c=1;）会使引擎的 isargs 标志保持置位且从未清除——因此之后在 set/if 中求值的任何捕获（$1）都会带 URI 转义 被复制到按未转义 长度分配的缓冲区中。任何请求 URI 携带 %XX 转义或 + 的客户端均可在认证前触达。 结果（阶段 1）： 一个安全的差分检测器 （易受攻击的...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

cve-2025-55182-node

...

CVE-2026-44262

dedoc/scramble RCE CVE-2026-44262 PoC 📜 Description CVE-2026-44262 is an unauthenticated Remote Code Execution vulnerability in dedoc/scramble, a Laravel API documentation generator. NodeRulesEvaluator::doEvaluateExpression calls extract$variables before . When a controller assigns to a variable...