CVE-2019-1367

0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...

LeakValue

Android 13 introduces many enhancements in order to harden Parcel serialization mechanism Here's presentation from Android Security and Privacy team on enhancements made That is great, definitely eliminates or makes unexploitable many vulnerabilities. Also they describe breaking my previous...

perl_spreadsheet_excel_rce_poc

ParseExcel security vulnerabilitiy TL;DR: RCE from logic in parsing format strings. Short explanation on the exploit Root cause of the exploitation comes from calling eval to an unvalidated user input in Utility.pm...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E Description A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.Most recent supported...

CVE-2026-42231

GHSA-q5f4-99jv-pgg5 — n8n XML Webhook Prototype Pollution → RCE CVE: CVE-2026-42231 Severity: Critical CVSS 10.0 Affected: n8n element. xml2js 0.6.2 uses Object.defineProperty with a data descriptor to set element keys on parsed objects. Because 'proto' in obj is always true, assignOrPush wraps t...

CVE-2025-0282

PoC for CVE-2025-0282 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-0282, and is based upon the exploitation strate...

CVE-2022-22965-PoC

CVE-2022-22965 Spring4Shell Proof of Concept Test the RCE Remote Code Execution in Spring Core​ Build the image BuildKit based build is required so you need to enable it. Easiest way is to set the DOCKERBUILDKIT=1 environment variable when invoking the docker build command, such as: $...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Unauthenticated Arbitrary File Upload Research by: Atomic Edge Severity: Critical | CVSS: 9.8 | Auth Required: None ⚠️ v2 — Technical corrections applied based on community feedback. See Changelog for details. Overview A critical unauthenticated arbitrary...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload Visit https://phankz.com...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Interactive shell HTTP hijack + POST + AES-256-CBC/BASE64 Detection -dnslog DNSLog No-Output Detection Nuclei -poc Vulnerability Echo Detection Exploitation -exp Interactive shell base64 echo -exp2 Interactive shell HTTP hijack + POST + Base64 -exp3...

xwiki-cve-2025-24893-poc

XWiki RCE Exploit PoC CVE-2025-24893 Overview This repository contains a Proof of Concept PoC exploit for the XWiki Remote Code Execution RCE vulnerability identified as CVE-2025-24893. The vulnerability allows an attacker to execute arbitrary code on a target XWiki instance by leveraging a craft...

CVE-2024-38472

Creating a Remote Code Execution RCE Metasploit module for the SSRF vulnerability CVE-2024-38472 in Apache HTTP Server on Windows is challenging because SSRF itself doesn't directly result in RCE. However, SSRF can often be a step toward achieving RCE, especially if you can use it to interact wit...

ghostlock-vagrant-box

Full Chain Vulnerability Testbed: Nginx RCE → GhostLock LPE Overview This repository provides a Vagrant environment designed to demonstrate a complete two-stage exploitation chain. The testbed automatically provisions an isolated Ubuntu 22.04 LTS virtual machine that is intentionally configured t...

boopkit

================================================================ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗██╗████████╗ ██╔══██╗██╔═══██╗██╔═══██╗██╔══██╗██║ ██╔╝██║╚══██╔══╝ ██████╔╝██║ ██║██║ ██║██████╔╝█████╔╝ ██║ ██║ ██╔══██╗██║ ██║██║ ██║██╔═══╝ ██╔═██╗ ██║ ██║ ██████╔╝╚██████╔╝╚██████╔╝██║ ██║...

c-copy-fail

CopyFail CVE-2026-31431 in Linux Kernel Crypto API Resources: main website aarch64 syscalls pwntools for generating shell code how ancillary data work in sendmsg...

CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 is a vulnerability related to 1Panel, involving client certificate bypass that may lead to remote code execution. This reposito...

CVE-2018-7602

CVE-2018-7602 A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - High...

hacktivity-vulns-exploits-lab

Vulnerabilities, Exploits, and Remote Access Payloads — lab writeup My walkthrough and analysis of the Hacktivity Cyber Security Labs sheet "Vulnerabilities, Exploits, and Remote Access Payloads" Ethical Hacking and Penetration Testing course, Leeds Beckett University. It covers how software...

cve-2025-55182

🛡️ React2Shell CTF 🚀 Welcome to React2Shell-CTF , a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell is a critical vulnerability affecting React-based applications. This repository provides a safe, locally deployable Capture The Flag CTF challenge to...