Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC for CVE-2024-30085 Proof of Concept exploit for the CVE-2024-30085 privilege escalation vulnerability. For educational and security research purposes only. ⚠️ Legal Warning FOR EDUCATIONAL USE ONLY ✅ Authorized security research ✅ Controlled laboratories ✅ Cybersecurity education ❌...

Fix-CVE-2023-36884

Fix-CVE-2023-36884.ps1 Temporary solution to mitigate the vulnerability CVE-2023-36884. This vulnerability affects the Windows operating system and may allow remote code execution. CVE-2023-36884 » CVE-2023-36884 The CVE-2023-36884 vulnerability, which is a critical security flaw that can result ...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Description This Nuclei template detects Apache Tomcat servers vulnerable to the TOCTOU race condition that allows remote code execution RCE. ⚠ Important note : This template should be used exclusively for educational purposes and in controlled environments with...

CVE-2017-9841-EXPLOIT

CVE-2017-9841 - PHPUnit Remote Code ExecutionRCE This vulnerability affects PHPUnit versions before 4.8.28 and all 5.x versions before 5.6.3. It allows attackers to execute arbitrary PHP code on servers where PHPUnit is exposed. The issue exists in the eval-stdin.php file located in PHPUnit's...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...

CVE-2025-12189

Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents = 7.10.1321 - Cross-Site Request Forgery to Arbitrary File Upload The Bread & Butter IO plugin contains a vulnerability in its image upload functionality that allows any attacker to trick authenticate...

CVE-2025-25257

🚨 CVE-2025-25257 – FortiWeb SQLi to RCE Critical SQL Injection → Webshell Execution Discovered and weaponized by 0xgh057r3c0n 🧠 Vulnerability Overview CVE-2025-25257 affects FortiWeb systems exposing the endpoint /api/fabric/device/status, which fails to properly sanitize Authorization header...

CVE-2025-11953-PoC

Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...

CVE-2024-48990

PoC for CVE-2024-48990 CVE-2024-48990 is a local privilege escalation vulnerability found in the needrestart utility. The vuln exists in versions prior to 3.8. The service, which runs as root during events like package installations, insecurely scans all running processes. When it finds a Python...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 This repository contains a proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress plugin, leading to remote...

CVE-2024-24401

Vulnerability Report CVE Disovered DESIGNED TO BE RUN ON KALI LINUX Notes Nagios has patched version 2024R1.0.1 in all recent downloads. To determine if a target is vulnerable, ensure they are using an older download of 2024R1.0.1. The updated script checks to make sure that the target system is...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a chain of database manipulation and scheduled task execution, achieve remote...

CVE-2026-17544

CVE-2026-17544 — PHP bcmath OOB write → universal memory-only RCE A weaponized proof-of-concept for CVE-2026-17544 , an out-of-bounds write in PHP's rewritten bcmath extension bcstr2num. This turns the publicly known DoS-only crash into a full, universal, memory-only remote code execution primiti...

CVE-2026-27876

🚨 CVE-2026-27876 - Grafana Critical RCE via SQL Expressions A chained vulnerability allowing arbitrary file writes through SQL Expressions, leading to full Remote Code Execution RCE on the host. 📋 Overview CVE ID : CVE-2026-27876 Severity : Critical CVSS v3.1: 9.1 Published : March 27, 2026 CWE :...

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 Tentang Kerentanan React2Shell adalah kerentanan Remote Code Execution RCE kritikal yang mempengaruhi: Target| Versi Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️...

CVE-2026-3854-PoC

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injection For educational and authorized security research purposes only. Do not use against any system without explicit written permission. Overview CVE-2026-3854 is a Remote Code Execution vulnerability in GitHub Enterprise Server's and...

NSE_CVE-2025-55182

NSECVE-2025-55182 Nmap NSE script for scanning React2Shell CVE-2025-55182 Disclaimer The following code is provided for educational and research purposes only. Any use of this script is solely at the discretion and responsibility of the user. This scanner may produce false positives or inconclusi...

cve-2026-42945

CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

cve-2025-55182-node

CVE-2025-55182 Next.js RCE Exploit Tool 中文文档 | 漏洞原理分析 !CAUTION ⚠️ DISCLAIMER - READ BEFORE USE This tool is intended ONLY for: Security researchers conducting vulnerability verification Authorized penetration testing with explicit permission Educational and learning purposes Unauthorized access to...