CVE-2026-126823

The Atlas SQL JDBC driver is vulnerable to a local privilege escalation and code execution flaw. A local user with an ordinary account can place a malicious file (e.g., libmongosqltranslate.so ) in a shared temporary location. The driver's native library loading routine, specifically NativeLoader...

CVE-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Target commit: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Summary Field| Detail ---|--- CVE| CVE-2026-2005 Type| Heap buffer overflow Component| contrib/pgcrypto/pgp-pubdec.c — pgpparsepubencsesskey Impact| RCE as...

CVE-2025-24893

CVE-2025-24893 XWiki RCE Vulnerability Analysis Environment Setup 1. Running XWiki 15.10.10 Environment docker-compose up -d 2. Accessing XWiki URL: http://localhost:8080 Proceed with testing after completing the initial setup Create an admin account after accessing the initial page Install XWiki...

CVE-2024-23692

CVE-2024-23692 BURP POC GET /?n=%0A&cmd=ipconfig+/all&search=%25xxx%25url:%password%.exec|.?cmd.|timeout=15|out=abc..?n..?n.RESULT:.?n..^abc.====.?n. HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept:...

MassExploit-CVE-2024-4577

CVE-2024-4577 Mass Scanner & Exploit Tool This Python script automates the detection of servers vulnerable to CVE-2024-4577 , a critical vulnerability in PHP-CGI that allows remote code execution RCE through specially crafted query parameters. The tool sends a PHP payload using...

CVE-2025-5781

FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...

CVE-2024-25600-Bricks-Builder-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2025-20029-simulation

🔐 Replayable Attack Simulation – CVE-2025-20029 ⚠️ This repository simulates CVE-2025-20029 in a safe and controlled environment. It does not interact with real F5 BIG-IP systems or exploit any production service. The goal is educational: to study the vulnerability pattern and test payloads safely...

CVE-2025-24893

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC Vulnerability Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the...

cve-2026-63030-lab

CVE-2026-63030 — wp2shell Lab Pre-Authentication RCE in WordPress Core via REST API Batch Route Confusion + SQL Injection Overview wp2shell is a chain of two independently low-severity bugs in WordPress core that, when combined, allow an unauthenticated remote attacker to: 1. Reach an SQL injecti...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 is a critical vulnerability affecting QNAP Network Attached Storage NAS devices. The flaw originates from the unsafe use of the strcpy function in the NoSupportACL function of the share.cgi script within the QTS operating system, leading to a stack buffer overflo...

CVE-2024-24590-ClearML-RCE-Exploit

CVE-2024-24590 — ClearML Pickle Artifact RCE Overview Field| Details ---|--- CVE| CVE-2024-24590 Software| ClearML Affected Versions| 0.17.0 – 1.14.2 Vulnerability| Unsafe pickle deserialization of task artifacts Authentication| Requires write access to a ClearML project Impact| Remote Code...

check-react-rce-cve-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. 🚨 Overview This tool scans your project for vulnerable versions of React, Next.js, and...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...

cve-2017-0143

Exploiting CVE-2017-0143 - EternalBlue Vulnerability 📌 Description This project demonstrates how to exploit the CVE-2017-0143 vulnerability EternalBlue in a controlled environment for educational and penetration testing purposes. The attack was performed on a Windows 7 system using Metasploit...

CVE-2021-31166

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. According to this tweet the vulnerability has...

CVE-2025-32432

CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Authentication Remote Code Execution in Craft CMS Affected: Craft CMS 3.x, 4.x, and 5.x up to 5.6.16 Info: This exploit is tested against HackTheBox Orion machine Overview This repository contains a proof-of-concept exploit for CVE-2025-32432...

CVE-2023-50564-pluck

CVE-2023-50564-pluck CVE-2023-50564 An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. This is an authenticated vulnerability. Disclaimer: This code is meant for...

PHP_CVE-2012-1823

PHP-CGI Remote Code Execution Vulnerability CVE-2012-1823 Principle Reference article http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Affected versions: php Vulnerability Analysis PHP SAPI and Operation Modes First, let's introduce the operation modes of PHP. Download the PHP source...

php-stale-global-uaf

php2shell/php2dos - php-stale-global-uaf Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP 8.5 they can force one request to die with a fatal error, then send a second request to the same worker. PHP 8.5 keeps a backtrace from th...