643463 matches found
CVE-2025-68613
CVE-2025-68613 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by...
cupshax
CUPSHax Quick proof of concept for the recent CUPS exploit. I was planning to clean it up a lot more, but the embargo was lifted a lot sooner than expected, so the code is a bit rushed. For all the technical details you should honestly just read Evilsocket's writeup. This exploit was written afte...
CVE-2020-0688
CVE-2020-0688 Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution RCE Instead of having randomly-generated keys on a per-installation basis, all installations of Microsoft Exchange Server have the same validationKey and decryptionKey values in web.config. Thus, an authenticate...
CVE-2019-11932
CVE-2019-11932 Modify the listening address attacker's and the listening port in the exploit.c file Following hex code: 3139 322e 3136 382e 322e 3732 2034 3434 3420 Compile the code: gcc -o exploit egiflib.c exploit.c Run the compiled file ./exploit exploit.gif copy/paste the output into a gif...
CVE-2024-53677-POC
CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
List-CVE-2025-2026
CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...
CVE-2021-20837
CVE-2021-20837 MovableType XMLRPC - RCE...
CVE-2025-22968
CVE-2025-22968 D-Link DWR-M972V Software Version 1.05SSG Unauthenticated Access Vulnerability Description Unauthenticated access in the default configuration of the D-Link DWR-M972V Software Version 1.05SSG allows an anonymous attacker to access the router and upload malicious backdoor scripts vi...
CVE-2022-26809
CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the privileges of the RPC service,...
nifi-CVE-2026-39816-poc
Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration for CVE-2026-39816, an EXECUTECODE permission bypass in Apache NiFi 2.8.0 that lets a flow designer who has been deliberately denied code-execution privileges run arbitrary Groovy in the NiFi JVM via the graph bundle's ExecuteGraphQuer...
CVE-2025-31324
CVE-2025-31324 CVE-2025-31324, SAP Exploit POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...
CVE-2025-1974-poc
POC of IngressNightmare, RCE in Ingress NGINX CVE-2025-1974 Developed from: https://github.com/zwxxb/CVE-2025-1974/blob/main/poc.py https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilitieshow-did-we-discover-ingressnightmare-24 Thanks Usage forward the admission webhook kubectl port-forwa...
PoC-CVE-2025-55182
The Script exploits CVE-2025-55182, an RCE that affects the React Server Components used in React.js and Next.js. Affected React Versions: 19.0.0 19.1.0 and 19.1.1 19.2.0 Next.js: Next.js 15.x all versions prior to fixes Next.js 16.0.0 initial alpha/beta/RC versions built on vulnerable React 19...
CVE-2026-49869
CVE-2026-49869: Kestra Unauthenticated Remote Code Execution ★PoC and Docker lab for the authentication bypass in Kestra OSS AuthenticationFilter★ Run this lab only on systems you control. The -p 8080:8080 example may publish the vulnerable API on all host interfaces; block access from other...
CVE-2023-38831-PoC
CVE-2023-38831 PoC This repository is just a Proof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inclu...
OHTS
OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...
CVE-2026-32746
🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...
Sandbox-Challenge-Log4Shell-CVE-2021-44228-
Sandbox Challenge: Log4Shell CVE-2021-44228 Overview This walkthrough documents the steps taken to complete the CISA Threat Sandbox Challenge for CVE-2021-44228, commonly known as Log4Shell. The challenge involved completing two objectives — one red team offensive and one blue team defensive —...