1282064 matches found
EXPLOIT-CVE-2026-9198
CVE-2026-9198 — IBM Langflow OSS Unauthenticated RCE Proof-of-concept exploit and a self-contained Docker lab for CVE-2026-9198 , an unauthenticated remote code execution vulnerability in IBM Langflow OSS. The exploit chains two endpoints — autologin which hands out a SUPERUSER token to anyone an...
CVE-2025-55182-demo
CVE-2025-55182 — demo This repository provides a demonstration of the CVE-2025-55182 vulnerability, which allows for remote code execution RCE in vulnerable Next.js applications. References: CVE entry: https://vulners.com/cve/CVE-2025-55182 Related PoC: https://github.com/msanft/CVE-2025-55182...
CVE-2019-0232
CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2SHELL HTTP-only, ASLR-bypassing remote code execution f...
CVE-2025-32432-POC
Craft CMS CVE-2025-32432 Single-Target PoC Authorized testing only. This repository is intended for controlled lab environments, CTF platforms such as Hack The Box, internal validation, and defensive verification. Do not run this against systems you do not own or have explicit permission to test...
CVE-2025-65675
CVE-2025-65675 Stored Cross site scripting XSS vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures. Discovered by - Rivek Raj Tamang RivuDon, Sikkim, India. Affected Product: ClassroomIO Affected Version: 0.1.13...
cve-2024-0012_9474-panos_authbypass_reproduction
CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...
Apache-OFBiz-Directory-Traversal-exploit
Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...
CVE-2025-55182-Exploit
React2Shell CVE-2025-55182 - Docker Vulnerable Lab An intentional vulnerable Next.js application demonstrating Remote Code Execution RCE via insecure Child Process handling. This lab is designed for educational purposes and security testing. ⚠️ WARNING: DOT NOT RUN THIS ON A PUBLIC FACING SERVER...
CVE-2023-26469-Jorani
CVE-2023-26469 Exploitation Tool Overview This is a Proof of Concept PoC exploit tool for Jorani 1.0.0, which allows attackers to achieve remote code execution through path traversal and log injection techniques. ⚠️ Warning: This tool is intended for security research and authorized testing only...
Tryhackme_Billing
TryhackmeBilling Billing CTF MachineCVE-2023-30258Remote Code Execution...
CVE-2022-0324
cve-2022-0324 https://ngtuonghung.github.io/pwn/cve-reproduction/cve-2022-0324/...
CVE-2025-34299-lab
CVE-2025-34299 Test Environment Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Authentication Remote Code Execution vulnerability. Vulnerability Details Field| Value ---|--- CVE ID| CVE-2025-34299 Severity| Critical CVSS 9.8 CWE| CWE-434 Unrestricted Upload of File with Dangerous Typ...
CVE-2026-48908
CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Proof-of-concept exploit for CVE-2026-48908 , a critical CVSS 4.0 = 10.0 unauthenticated remote-code-execution vulnerability in the SP Page Builder component comsppagebuilder for Joomla, by JoomShaper. | ---|--- CVE| CVE-2026-48908...
CVE-2025-8110
Gogs Arbitrary File Write to RCE CVE-2025-8110 - Educational Use Exploit This repository contains a Proof of Concept PoC script in Python to demonstrate and analyze the vulnerability registered as CVE-2025-8110 in the self-hosted Git service Gogs versions 0.13.3 and earlier. ⚠️ Disclaimer !WARNING...
WP2Shell-CVE-2026-63030-POC
WP2Shell Detector and Validation PoC CVE coverage: CVE-2026-63030 and CVE-2026-60137 Intended use: Authorized security testing, defensive validation, and disposable localhost labs only WP2Shell is a WordPress Core vulnerability chain combining a pre-authentication REST API batch-route confusion b...
cve-2024-49113-ldap_nightmare_reproduction
CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow Field| Value ---|--- CVE| CVE-2024-49113 Alias| LDAP Nightmare CVSS 3.1| 9.8 — CRITICAL CWE| CWE-122 — Heap-based Buffer Overflow Discovered| SafeBreach published PoC January 2025 Exploitation|...
cve-2025-55182-react2shell_reproduction
CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth Remote Code Execution in React Server Components Discovered by Chinese threat actors. Actively exploited by China-nexus APT groups. Overview Dubbed "React2Shell" , this vulnerability enables unauthenticated remote code execution via unsaf...
CVE-2026-13157
CVE-2026-13157 Theme Demo Import false during upload processing. An authenticated user possessing import capabilities—such as a default site administrator or a non-super-admin site administrator in a WordPress Multisite architecture—can bypass file restriction enforcement to upload arbitrary...