APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary...

CVE-2024-3094

Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH 이 저장소는 CVE-2024-3094xz-utils 패키지의 liblzma 라이브러리에 있는 백도어로, OpenSSH 프로세스를 통한 RCE로 이어짐 취약점 분석 결과를 담고 있습니다. 프로젝트를 통해 격리된 테스트 환경을 준비하고, 위협 모델을 개발했으며, 자동 검증 스크립트를 작성했습니다. 📂 프로젝트 구조 Dockerfile — 환경 빌드 스크립트Debian Bookworm. 모든 의존성OpenSSH,...

CVE-2025-41243-Vulnerability-Lab

CVE-2025-41243: Spring Cloud Gateway RCE Lab Descripción de la vulnerabilidad Spring Cloud Gateway presenta una vulnerabilidad de inyección de expresiones SpEL. Cuando el endpoint Actuator está habilitado, un atacante puede lograr la ejecución remota de código RCE. Método de inicio docker-compose...

cdt-vulnsamba-deploy

CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...

CVE-2018-16763_fuel_cms_exploit

⚠️ Disclaimer This project is strictly for educational and ethical security research purposes only. All activities were performed in a controlled lab / CTF environment. Do not use the techniques described here on any system without proper authorization. 🎯 Objectives Identify potential attack...

CVE-2026-25769

CVE-2026-25769 what is CVE-2026-25769 ? CVE-2026-25769 is a critical Remote Code Execution RCE vulnerability in Wazuh, the open-source security platform used for threat prevention, detection, and response. what is wazuh ? Wazuh is a free and open-source security platform used for threat preventio...

CVE-2025-5548

💣 Exploit Development - Buffer Overflow This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control. 🎯 Objective The goal of this phase is to develop a functional exploit that allows...

CVE-2025-55182-Auto-Scanner

root@kitploit: CVE-2025-55182 Scanner is a high-performance tool for detecting vulnerable Next.js Server Action endpoints. It uses multi-threaded scanning, confidence-based detection, and multiple response indicators to identify potential Remote Code Execution RCE vulnerabilities. Features -...

CVE-2025-5548-Exploit-Development

CVE-2025-5548 - Laboratorio de Desarrollo de Exploits Este repositorio documenta el proceso de configurar un entorno de trabajo para el análisis de vulnerabilidades y el desarrollo de exploits, y aplicarlo a un caso práctico de desbordamiento de búfer. El proyecto se basa en FreeFloat FTP Server...

Exploiting-Samba-on-Metasploitable-2

Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...

THM---Solar-exploiting-Log-4j

THM---Solar-exploiting-Log-4j Esta sala se basa en explotar la notoria vulnerabilidad Log4j CVE-2021-44228, también conocida como Log4Shell. La debilidad permite a los atacantes ejecutar código remoto mediante la inyección de payloads maliciosos en los mensajes de registro. TAREA 1 – INTRODUCCIÓN...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 脆弱性テスター CVE-2023-33177 の自動セキュリティテストツール - Xibo CMS の Zip Slip パストラバーサル脆弱性によりリモートコード実行 RCE が可能になります。 ⚠️ 免責事項 このツールは教育および許可されたテスト目的のみに使用してください。 自分が所有している、または明示的なテスト許可を得ているシステムでのみ使用してください。 無許可のテストは違法であり、非倫理的です。 📋 説明 Xibo CMS バージョン 1.8.0-2.3.16 および 3.0.0-3.3.4...

cve-2024-38063-detection-mitigation-system

CVE Vulnerability Detection and Mitigation System Author: Rohit Malik | Domain: Cybersecurity | Type: Group Academic Project | Purpose: Portfolio & Educational Overview This project is a group-based cybersecurity implementation focused on detecting and mitigating a real-world critical vulnerabili...

cve-2025-55182

Penetration Testing Writeup: Next.js RCE & Node.js Inspector Privilege Escalation This technical writeup details the exploitation path for compromising a target hosting a vulnerable Next.js web application, achieving initial access via harvested credentials, and leveraging a misconfigured local...

CVE-2026-34724

🚨 CVE-2026-34724 - Zammad 7.0.1 - Server-Side Template Injection SSTI to Remote Code Execution RCE via AI Agent 📌 Overview Zammad is a popular open-source web-based helpdesk and customer support system. CVE-2026-34724 is a Server-Side Template Injection SSTI vulnerability in the new AI Agent...

CVE-2025-2783

Chromium CVE-2025-2783: Escape de Sandbox y Exploit RCE de Cadena Completa Este repositorio contiene una implementación de exploit de cadena completa para CVE-2025-2783. La vulnerabilidad reside en la capa de comunicación Ipcz de Chromium, permitiendo a un atacante lograr un escape de sandbox y...

CVE-2024-51793

Wordpress Computer Repair Shop = 3.8115 - Unauthenticated Arbitrary File Upload CVE-2024-51793 The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.8115. This makes it possib...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 인증된 RCE PoC 이 저장소는 pgAdmin4 의 특정 버전에 영향을 미치는 취약점 CVE-2025-2945 와 관련된 보안 연구 및 승인된 침투 테스트를 위해 작성된 개념 증명PoC 스크립트 를 포함합니다. 이 문제는 SQL 편집기에 접근 권한이 있는 인증된 pgAdmin 사용자가 Query Tool 패널 초기화 흐름을 악용하여 원격 코드 실행을 트리거할 수 있게 합니다. 이 PoC는 교육, 감사 및 방어 목적으로만 취약점을 시연합니다. 이 CVE와 PoC가 어떻게 작동하는지...

CVE-2023-21716

CVE-2023-21716 — Corrupción de montón en Microsoft Word RTF fonttbl RCE Gravedad: Crítica CVSS 9.8 Afecta: Microsoft Word 2013 / 2016 / 2019 / 2021 sin parche Parche: Microsoft Patch Tuesday de febrero de 2023 Autor: REGGYRAIDER Resumen de la vulnerabilidad CVE-2023-21716 es una vulnerabilidad de...