CVE-2025-47812

CVE-2025-47812 This is a Proof of Concept PoC of the Wing FTP Server Exploit CVE-2025-47812 Description Wing FTP Server versions prior to 7.4.4 suffered a Remote Code Execution RCE vulnerability as a result of the insecure treatment of the username parameter. When we are allowed to login in the...

Expoitation-de-la-vuln-rabilit-CVE-2022-22965

Exploitation of vulnerability CVE-2022-22965 The vulnerability CVE-2022-22965, known as Spring4Shell, is a remote code execution RCE flaw in the Java Spring Core framework, present in versions prior to 5.3.18 and 5.2.20. This vulnerability allows an attacker to inject and execute code remotely on...

-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE

SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE This is an investigation conducted on the Let's Defend platform, based on a recent SharePoint CVE. Let's take a look. 1. Examine the rule name. Rule names are usually created specifically for the attack to be detected. By examining...

CVE-2025-20260-POC

CVE-2025-20260 EXPLOIT This is a proof of concept for CVE-2025-20260. This is a vulnerability in the ClamAV software's PDF scanning processes. By sending a specially crafted, malicious PDF file it is possible to cause a buffer overflow, resulting in a denial of service or arbitrary code execution...

CVE-2026-98385

A flaw was found in the Linux kernel. A race condition when switching memory management contexts allows the process scheduler to access memory that has already been freed, leading to a use-after-free condition. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by...

Explora-o-RCE-n-o-autenticado-JetBrains-TeamCity-CVE-2024-27198-

Unauthenticated RCE Exploitation JetBrains TeamCity CVE-2024-27198- In February 2024, two new vulnerabilities were identified affecting the JetBrains TeamCity server CVE-2024-27198 and CVE-2024-27199...

EUVD-2026-97318

A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is...

CVE-2026-108819

The agno-agi agno framework (up to versions 3.0.6/3.1.1 ) contains a security flaw in the Agent Orchestration Layer component. A vulnerability exists in the exec function where manipulating the code argument allows for the execution of dynamically-managed code resources . This flaw enables remote...

docker-lab-cve-2017-5638-cve-2021-41773

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-based attack emulation lab designed to demonstrate a multi-stage kill chain, lateral movement, and multi-point IDS detection. Overview This lab simulates a realistic network environment where an attacker progresses from initial...

CVE-2020-0618_DETECTION

CVE-2020-0618 - Microsoft SQL Server Reporting Services SSRS RCE Detection PoC 📜 Description This is a simple PoC to detect CVE-2020-0618 , a Remote Code Execution vulnerability affecting Microsoft SQL Server Reporting Services SSRS. The vulnerability exists due to improper path validation in the...

CVE-2026-20841

CVE-2026-20841 - Windows Notepad Remote Code Execution RCE Security Research & Technical Analysis Repository ⚠️ This repository is intended for educational, defensive, and research purposes only. 📖 Overview CVE-2026-20841 is a critical Remote Code Execution RCE vulnerability affecting Microsoft...

CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box

CVE-2026-2796 + CVE-2026-2768 — Escape the Wasm Box Full-chain Firefox exploitation research: a WebAssembly type confusion for renderer code execution , chained toward a parent-process bug for a sandbox escape. Both bugs were fixed in Firefox 148 MFSA-2026-13; the target here is a Firefox...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch releases of Callhome. Vulnerability Details CVEID:CVE-2026-11824 DESCRIPTION: SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search...

CVE-2025-6440

CVE-2025-6440 — WordPress WooCommerce Dynamic Pricing & Discounts Plugin Overview This repository contains a Python proof-of-concept PoC script for testing an unauthenticated file upload vulnerability affecting the WordPress WooCommerce Dynamic Pricing & Discounts plugin. ⚠️ This project is...

log4j-CVE-2021-44228-test

log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview Property|...

CVE-2026-21858

CVE-2026-21858 n8n Workflow Automation Platform - Remote Code Execution A security research tool for detecting CVE-2026-21858, a critical remote code execution vulnerability in the n8n workflow automation platform. Table of Contents Vulnerability Summary Affected Versions Technical Analysis...

CVE-2026-4885

CVE-2026-4885 Piotnet Addons for Elementor Pro Note: The exploit can only be triggered if a file field is added to the Piotnet form. INFO : CVE-2026-4885 CVSS Score : 9.8 Critical CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Versions : = 7.1.70 Patched : No patch available...

react2shell-test-server

React2Shell Test Server A test server for demonstrating and testing React2Shell CVE-2025-55182 vulnerability Description We have been researching the React2Shell RCE CVE-2025-55182 since it was released, and we worked on preventing this vulnerability with our customers. We are open-sourcing this...

CVE-2026-60004

🚨 CVE-2026-60004 - RCE Critical Remote Code Execution in Gitea via diffpatch Git Hook A critical Remote Code Execution RCE vulnerability allowing arbitrary command execution through thediffpatch API endpoint by abusing Git hook execution. 📖 Overview CVE-2026-60004 is a Critical Remote Code...