CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address" In the background the ping extension is using the command prompt of Windows to perform the ping. The input field for the Test Target Host is also 1024 chars long. After th...

CVE-2026-127109

A code injection vulnerability in promzard’s template-loading functionality allows an attacker who can control property names in the context object ctx to execute arbitrary code with the privileges of the Node.js process. The library inserts context property names into a generated function’s...

CVE-2024-29943-but-with-wasm

CVE-2024-29943, but with wasm An end-to-end exploit chain for CVE-2024-29943 that achieves arbitrary native code execution by smuggling shellcode into SpiderMonkey's WebAssembly JIT code page as f64.const immediates — no ROP, no VirtualProtect, no external toolchain. Verified working against the...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...

CVE-2021-23639

Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...

CVE-2024-28515

CVE-2024-28515 Description Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Information CNVD has completed verification of this vulnerability, but it has not...

springcloudRCE

springcloudRCE Spring Cloud Gateway RCE - CVE-2022-22947...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...

CVE-2025-3248

CVE-2025-3248 — Langflow AI Remote Code Execution Unauthenticated Author: 0xgh057r3c0n Description This exploit targets a critical unauthenticated RCE vulnerability CVE-2025-3248 in Langflow AI. The vulnerability allows an attacker to execute arbitrary system commands on the target server via the...

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...

mIRC-CVE-2019-6453

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Link to the write-up We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument...

CVE-2021-32804

CVE-2021-32804 This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm". Environment Setup docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Vulnerability Reproduction node-tar...

cve-2023-30212

cve-2023-30212 PoC for CVE-2023-30212 using Docker CVE-2023-30212 Environment Setup and PoC Report 📌 Overview This report details the direct construction of a Docker-based vulnerable web environment for CVE-2023-30212, a vulnerability not present in Vulhub, and demonstrates the vulnerability...

CVE-2024-50379

CVE-2024-50379 Proof of Concept PoC This repository contains a proof of concept PoC script to exploit CVE-2024-50379 , a vulnerability in Apache Tomcat. The vulnerability is a Time-of-Check Time-of-Use TOCTOU race condition that can lead to remote code execution RCE if the server's configuration...

CVE-2026-41242

CVE-2026-41242 — protobuf.js Code Injection to RCE CVSS 9.4 Critical | Code Injection CWE-94 Overview protobuf.js npm: protobufjs versions ≤ 7.5.4 and ≤ 8.0.0 are vulnerable to arbitrary code execution via type names in the protobuf schema. The @protobufjs/codegen module concatenates type names...

CVE-2023-43149

CVE-2023-43149 Author : Aitor Herrero Fuentes Vendor: SPA-Cart Vendor Homepage: https://spa-cart.com/ Software Link: https://demo.spa-cart.com/admin Version: 1.9.0.3 Tested on: Windows 10 Pro CSRF ADD ROOT ACCOUNT Cross Site Request Forgery vulnerability in application demo.spa-cart.com allows a...

CVE-2026-41472-POC

CyberPanel XSS to RCE CVE-2026-41472 One-click Remote Code Execution in CyberPanel v2.4.3 via unauthenticated API endpoints. Overview This exploit chains multiple vulnerabilities in CyberPanel's AI Scanner feature: 1. Unauthenticated Database Injection /api/ai-scanner/callback accepts arbitrary...

CVE-2017-9791

CVE-2017-9791 Metasploit module for Apache Struts CVE-2017-9791 Remote Code Execution Vulnerability...

Adobe_ColdFusion_RCE_Unauthenticated

CVE-2023-26360 — Adobe ColdFusion Unauthenticated RCE Python implementation of the remote code execution exploit for CVE-2023-26360, based on analysis of the original Metasploit module and the prior work by jakabakos. Why this exists The jakabakos PoC attempts to inject directly into the variable...

CVE-2020-17530

CVE-2020-17530 Apache Struts2 is a web framework for developing Java EE web applications. On December 8, 2020, Apache Struts disclosed the S2-061 Struts remote code execution vulnerability CVE-2020-17530, which may have an OGNL expression injection vulnerability when using certain tags, resulting...