threatDemos

🚨 Repository di Dimostrazioni di Minacce alla Sicurezza Android Una raccolta completa di prove di concetto di vulnerabilità di sicurezza Android e vettori di attacco Questo repository funge da risorsa educativa che mostra minacce alla sicurezza Android reali e le loro corrispondenti strategie di...

CVE-2022-46169

CVE‑2022‑46169 – Spiegazione e Panoramica del Progetto Cacti Unauthenticated Remote Code Execution Cos'è questo progetto? Questo progetto è un incarico di cybersecurity in cui viene dimostrato CVE‑2022‑46169 : una vulnerabilità critica nella piattaforma open-source di monitoraggio di rete Cacti...

CVE-2026-6992-PoC

CVE-2026-6992-PoC Proof-of-Concept für die Bluetooth-PIN-RCE-Injection CVE-2026-6992, überarbeitet von https://github.com/utmost3/cve/issues/2. Ich nehme keine Anerkennung für die Entdeckung der Sicherheitslücke. Dies dient ausschließlich zu Bildungs- und Portfoliozwecken. Für Geräte, die keine...

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Versione Spring Framework 5.2.20 e 5.3.18 Versione con patch: Spring Framework 5.3.18 e 5.2.20 Spring Boot 2.6.6 e 2.5.12 Dettagli Spring Core è il componente principale di Spring Framework. Questa è la base per costruire altri componenti nell'ecosistema Spring...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 Schwachstellen-Massenscan und Exploit Beschreibung OpenSSH-Server sshd 9.1 führte eine Double-Free-Schwachstelle bei der Verarbeitung von options.kexalgorithms ein. Dies wurde in OpenSSH 9.2 behoben. Der Double-Free kann von einem nicht authentifizierten Remote-Angreife...

CVE-2026-34674 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34674 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34674

Adobe Substance 3D Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically that a victim must open a malicious file. Adobe rated th...

EUVD-2026-67082

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-55182-Attack-Analysis

Análise do Ataque CVE-2025-55182: RCE em React Server Components Análise de ataque real em uma aplicação Next.js de produção 📋 Sumário Resumo Executivo Visão Geral da Vulnerabilidade Linha do Tempo do Ataque Análise Técnica Análise do Malware Indicadores de Comprometimento IOCs Mitigação e Respos...

CVE-2022-0324

cve-2022-0324 https://ngtuonghung.github.io/pwn/cve-reproduction/cve-2022-0324/...

CVE-2023-38831

Platziere die Köderdatei und die bösartige Skriptdatei im aktuellen Verzeichnis; als Köderdatei wird ein Bild .png, jpg oder ein Dokument .pdf empfohlen. 2. Führe python gen-CVE2023-38831.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar aus, um deinen Exploit zu generieren...

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — Alerta de RCE Pré-Autenticação 🚨 🧩 Resumo ID: CVE-2025-61757 Produto: Oracle Identity Manager Oracle Fusion Middleware Componente: REST WebServices Versões Afetadas: 12.2.1.4.0 & 14.1.2.1.0 Severidade: 🔴 Crítica — 9.8 CVSS 3.1 Publicado: 21 de outubro de 2025 Tipo: Autenticação...

CVE-2022-0543-Home-Lab

CVE-2022-0543 — Escape de Sandbox Lua do Redis Execução Remota de Código O que é o CVE‑2022‑0543 — Escape de Sandbox Lua do Redis? Esta vulnerabilidade ocorre especificamente no Redis instalado por pacotes Debian / Ubuntu. Como o Redis é compilado com o motor Lua como módulo dinâmico lua-cjson,...

CVE-2019-9193-Home-Lab

ENGLISCHE VERSION CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Dieses Labor simuliert CVE-2019-9193 , eine Schwachstelle in PostgreSQL 9.3–11.2, die folgendes ermöglicht: root@kitploit: COPY ... FROM PROGRAM '' zur Ausführung von OS-Befehlen durch einen Superuser oder eine Rolle mit...

CVE-2017-12615-Home-Lab

CVE-2017-12615 Tomcat: Remote-Code-Ausführung durch JSP-Upload Dieses Labor simuliert die Schwachstelle CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload Sie entsteht durch die Einstellung readonly=false, die das Hochladen von Dateien über HTTP PUT ermöglicht, einschließlich .jsp-Dateie...

EUVD-2026-67081

The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previously disclosed vulnerabilities...

CVE-2026-79988

CVE-2026-79988 affects Craft CMS , where the Twig sandbox mechanism is misconfigured to allow dangerous functionality from the Yii framework , enabling authenticated remote code execution (RCE) . The vulnerability is rated CVSS 8.7 (HIGH) with a low complexity, network-based attack vector requiri...

CVE-2026-79988 Authenticated RCE through Twig sandbox escape

The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previously disclosed vulnerabilities...

CVE-2015-3306-Home-Lab

ProFTPD 1.3.5 modcopy — Laboratório de Simulação de RCE Este laboratório foi projetado para simular a vulnerabilidade CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE É usado para aprender Web Shell Injection RCE por meio do módulo modcopy do ProFTPD. Recursos ProFTPD 1.3.5 vulnerável...