1331755 matches found
CVE-2025-32434-exploit
Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...
Hacking-pdf.js-vulnerability
🚨 CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js This project demonstrates and analyzes CVE-2024-4367 , a high-severity vulnerability in Mozilla’s PDF.js library that allows arbitrary JavaScript execution through improper type checking in font handling code. Our research shows how a...
CVE-2023-36664-Ghostscript-command-injection
Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...
CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis
🔐 CVE-2024-38063 — IPv6 TCP/IP Remote Code Execution Analysis 📌 Project Description This project presents a technical analysis and practical demonstration of the critical vulnerability CVE-2024-38063 , disclosed by Microsoft during Patch Tuesday August 13, 2024. The vulnerability affects the...
CVE-2022-42889-POC
CVE-2022-42889-POC Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889. What's the Issue : Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefi...
CVE-2025-49132
Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...
CVE-2025-55182-Scanner
CVE‑2025‑55182 – Next.js RSC Deserialization RCE Scanner This tool checks whether a target is vulnerable to CVE‑2025‑55182 , a Remote Code Execution bug caused by unsafe handling of RSC React Server Components model payloads inside Next.js. The vulnerability chains Prototype Pollution →...
CVE-2024-0012_CVE-2024-9474_PoC
🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...
cve-2021-4034
cve-2021-4034...
Zerologon
Zerologon Exploit Code for CVE-2020-1472 aka Zerologon...
cve-2010-2075-analysis
CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...
CVE-2018-15133
CVE-2018-15133 Laravel Unserialized RCE pip install requests colorama multiprocessing...
CVE-2020-28018
CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...
CVE-2020-14321
Python script to exploit CVE-2020-14321 - Moodle 3.9 Course enrolments allowed privilege escalation from teacher role into manager role to RCE. Teachers of a course were able to assign themselves the manager role within that course. Payload extracted from:...
CVE-2026-121777 WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor-form allows Code Injection.This issue affects Cool Formkit Lite: from n/a through 2.7.10...
CVE-2026-121777 WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor-form allows Code Injection.This issue affects Cool Formkit Lite: from n/a through 2.7.10...
CVE-2026-121777
The Cool Formkit Lite WordPress plugin, specifically the extensions-for-elementor-form component, is vulnerable to an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. This flaw allows for Code Injection in versions from n/a through 2.7.10 . The vulnerab...
EUVD-2026-119248
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor-form allows Code Injection.This issue affects Cool Formkit Lite: from n/a through 2.7.10...
pyrocms-ssti-fix
🛡️ PyroCMS SSTI Fix Drop-in security fix for CVE-2023-29689 - Server-Side Template Injection leading to Remote Code Execution in PyroCMS 3.9. The Problem PyroCMS allows admin users to edit templates stored in the database. Without sandboxing, attackers with admin access can inject malicious Twig...