522517 matches found
CVE-2025-53690-Analysis
CVE-2025-53690: Sitecore ViewState Deserialization Vulnerability Analysis Overview CVE-2025-53690 is a critical ViewState deserialization vulnerability discovered in the Sitecore product suite, allowing remote code execution by exploiting exposed ASP.NET machine keys. Basic Information CVE ID :...
RTOS-F-16-Exploit---CVE-2019-7711
Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics ๐ Description This repository contains a Proof of Concept PoC for CVE-2019-7711 โ a Format String vulnerability in the Interpeak IPCOMShell TELNET...
CVE-2026-9082
๐จ CVE-2026-9082 : SQL Injection Vulnerability in Drupal Core High-Impact SQL Injection Vulnerability in Drupal Core PostgreSQL ๐ Overview CVE-2026-9082 is a SQL Injection vulnerability in Drupal Coreโs database abstraction layer. It affects only sites using PostgreSQL as the database backend. The...
CVE-2026-6271
CVE-2026-6271 โ Career Section WordPress Plugin RCE Scanner Plugin: Career Section career-section CVE ID: CVE-2026-6271 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Vulnerability Type: Unauthenticated Arbitrary File Upload โ Remote Code Execution Affected...
CVE-2025-66802
CVE-2025-66802 Sourcecodester Covid-19 Contact Tracing System 1.0 โ Unrestricted File Upload Leading to Remote Code Execution Description Sourcecodester Covid-19 Contact Tracing System version 1.0 contains a vulnerability classified as Unrestricted Upload of File with Dangerous Type CWE-434. The...
CVE-2024-7593
CVE-2024-7593 ๆ่ฟฐ๏ผ CVE-2024-7593 ๆฏไธไธชๅฝฑๅๅคไธช Pulse Secure ไบงๅ๏ผๅ ๆฌ Pulse Secure VPN๏ผ็ไธฅ้ๆผๆดใ่ฏฅๆผๆดๅ ่ฎธๅ ทๆ็ฎก็ๆฅๅฃ่ฎฟ้ฎๆ้็ๅทฒ่ฎค่ฏๆปๅป่ ๅจๅๅฝฑๅๆๅกๅจไธๆง่กไปปๆๅฝไปคใ่ฟๅฏ่ฝๅฏผ่ดๆถๆไปฃ็ ็ๆง่ก๏ผ็ ดๅ็ณป็ป็ๅฎๆดๆงๅๅฏ็จๆงใ ๆๆฏ่ฏฆๆ ็ฑปๅ๏ผ่ฟ็จไปฃ็ ๆง่ก๏ผRCE๏ผใ ไธฅ้ๆง๏ผไธฅ้๏ผCVSS๏ผ9.8๏ผใ ๅๅฝฑๅ็ๆฌ๏ผ็นๅฎ็ๆฌ็ Pulse Secure VPN ๅๅฐๅฝฑๅ๏ผ่ฏทๆฅ้ Pulse Secure ็ๅฎๅ จๅ ฌๅไปฅไบ่งฃ่ฏฆๆ ใ ๆฝๅจๅฝฑๅ ๅฉ็จๆญคๆผๆด็ๆปๅป่ ๅฏ่ฝ๏ผ ๅฎๅ จๆงๅถๅๅฝฑๅ็ๆๅกๅจใ ้ๅฎๅๆต้ๆ็ฏกๆนๆฐๆฎใ...
golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...
golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...
Stagefright-cve-2015-1538-1
Stagefright-cve-2015-1538-1 Discovered by Joshua J. Drake @jduck of ZIMPERIUM zLabs and fixed his project by Niranjan Shrestha @niranjanshr13. Exploit for RCE Vulnerability CVE-2015-1538 1 Integer Overflow in the libstagefright MP4 'stsc' atom handling Don't forget, the output of "createmp4" can ...
gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder
A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...
ore_react2shell_scanner
Rapticore Security Research - React2Shell Scanner A security assessment toolkit developed by the Rapticore Security Research Team for detecting React Server Components RSC vulnerabilities including CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability. Overview This toolkit...
CVE-2018-6789-Python3
CVE-2018-6789 Exim 4.90.1 RCE Vulnerability Exim 4.90.1 RCE Vulnerability remake for Python3 with arguments passed from CLI Usage: python3 exim.py -t localhost -p 25 -lh 192.168.0.159 -lp 1337...
CVE-2025-55182-React2Shell-RCE
CVE-2025-55182 โ React2Shell RCE GUI A modern, neon-themed GUI tool for security testing React2Shell CVE-2025-55182 on React Server Components / Next.js applications. Built with Python + CustomTkinter , it lets you: Check if a specific endpoint is vulnerable to React2Shell Run shell commands on...
My-Exploits
My-Exploits Vulnerability research I have done on four widely deployed platform services: Keycloak, Apache NiFi, HashiCorp Vault and HashiCorp Nomad. For each finding this repo carries the write-once artifacts I actually use, a Metasploit module where it made sense, a standalone Python proof of...
CVE-2025-66478-Research-Proof-of-Concept
CVE-2025-66478-Research-Proof-of-Concept ๆฆ่ฟฐ ๆญคไปๅบๅ ๅซไธ CVE-2025-66478 ็ธๅ ณ็็ ็ฉถๅๆฆๅฟต้ช่ฏๅฎ็ฐ๏ผ่ฏฅๆผๆดๅฝฑๅๆไบ Next.js / React ๆๅกๅจ็ปไปถ้ ็ฝฎใ ่ฏฅ้กน็ฎๆฏๅจๅๆงๅฎ้ชๅฎค็ฏๅขไธญๅผๅ็๏ผ็จไบๆ่ฒๅ้ฒๅพกๆงๅฎๅ จ็ฎ็ใ ๅ ่ดฃๅฃฐๆ ๆญคไปๅบไป ไพไปฅไธ็จ้ๆไพ๏ผ ๅฎๅ จ็ ็ฉถ ้ฒๅพกๆงๆต่ฏ ๆ่ฒ็ฎ็ ๆๆ็ๅฎ้ชๅฎค็ฏๅข ่ฏทๅฟๅจๆช็ปๆ็กฎๆๆ็ๆ ๅตไธ้ๅฏน็ณป็ปไฝฟ็จๆญคไปฃ็ ใ ไฝ่ ๅฏนๆปฅ็จ่กไธบไธๆฟๆ ไปปไฝ่ดฃไปปใ ๆๆฏๆ่ฆ ่ฏฅๆผๆดๅ ่ฎธๆปๅป่ ้่ฟไธๅฎๅ จๅฐๅค็ React ๆๅกๅจ็ปไปถ่ด่ฝฝ๏ผ่งฆๅ้้ขๆ็ไปฃ็ ๆง่กใ ๅๅฝฑๅ็ๅบ็จ็จๅบๅฏ่ฝๆด้ฒ่ฝๅคๅจ็นๅฎๆกไปถไธ่ฎฟ้ฎ...
Info-Sys-Security-CVE-2025-55182
CVE-2025-55182 Security Lab "React2Shell" This repository contains a local academic lab for analyzing CVE-2025-55182 in a controlled React Server Components environment. The lab simulates the vulnerability, its exploitation, and the applied patch. ๐ Repository Layout Core Applications...
Blackash-CVE-2025-55182
๐จ CVE-2025-55182 โ Critical React Server Vulnerability ๐ง What It Is โ๏ธ A critical security flaw in React Server Components RSC ๐งจ Caused by unsafe deserialization ๐ Exploitable via network requests ๐ No authentication required โ ๏ธ Can lead to Remote Code Execution RCE โ This means attackers could...
CVE-2025-57819-POC
CVE-2025-57819 โ FreePBX SQL Injection โ RCE PoC CVE-2025-57819 is a critical SQL injection vulnerability in FreePBX that allows an unauthenticated attacker to achieve remote code execution by chaining a SQL injection with cron job injection. โ ๏ธ Disclaimer : This repository is for authorized...
CVE-2025-24016
CVE-2025-24016 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...
RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111
Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 โ ๏ธ IMPORTANT โ Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...