1283512 matches found
CVE-2023-22527_Confluence_RCE
CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...
CVE-2026-33017
CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote Code Execution PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Use the following commands to build and run the vulnerable Langflow environment: docker build -t...
cve-2024-7965-poc
cve-2024-7965-poc CVE-2024-7965 is a high-severity vulnerability in the V8 JavaScript engine of the Google Chrome browser. The vulnerability stems from improper implementation in the V8 engine when handling specific JavaScript code, leading to heap memory corruption. An attacker could exploit thi...
CVE-2021-41773-exercise
CVE-2021-41773-exercise A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by...
CVE-2021-31805-POC
CVE-2021-31805-POC Vulnerability Information Apache Struts is a free, open-source MVC framework for creating elegant, modern Java web applications. It favors convention over configuration, can be extended using a plugin architecture, and ships with plugins that support REST, AJAX, and JSON...
CVE-2023-38646
CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...
CVE-2025-49132
CVE-2025-49132 Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute...
MATE
MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...
CVE-2026-40897
CVE-2026-40897 Remote Code Execution in Math.js Expression Parser ★ CVE-2026-40897 Remote Code Execution in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...
CVE-2026-6951
CVE-2026-6951 simple-git Remote Code Execution ★ CVE-2026-6951 simple-git --config Option Filter Bypass RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 Overview CVE-2026-6951 is a remote code execution vulnerability in simple-git caused by an incomplete f...
PS4-5.05-Kernel-Exploit
PS4 5.05 Kernel Exploit Summary In this project you will find a full implementation of the second "bpf" kernel exploit for the PlayStation 4 on 5.05. It will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level modifications to the system. This exploit also contains...
CVE-2026-53921 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...
CVE-2026-53921
A critical stack-based buffer overflow exists in the odhcpd daemon of OpenWrt , affecting versions prior to 24.10.8 and 25.12.5 . The vulnerability is triggered during the serialization of DHCPv6 Reply packets in the build_ia() and dhcpv6_ia_handle_IAs() functions. When processing a specially cra...
CVE-2023-22527-POC
CVE-2023-22527 &color=brighgreen%3E Description A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.Most recent supported...
log4jhound
log4jhound Bash script that detects Log4j occurences in your projects and systems: unpacks JARs and analyzes their Manifest files, text search in source code. Usage: ./log4jhound.sh rootdirectory...
CVE-2021-45010-TinyFileManager-Exploit
CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project’s Tiny File Manager = 2.4.3 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve code execution o...
CVE-2023-1177-MLFlow
CVE-2023-1177 MLFlow Path Traversal About MLflow MLflow is an open-source platform for managing the end-to-end machine learning lifecycle. Primary Functions: MLflow tackles four primary functions: Tracking experiments to record and compare parameters and results MLflow Tracking. Packaging ML code...
CVE-2024-27115-Exploit
SOPlanning 1.52.01 - Remote Code Execution RCE Authenticated Exploit Details Exploit Title : SOPlanning 1.52.01 Simple Online Planning Tool - Remote Code Execution RCE Authenticated Date : 6th October, 2024 Exploit Author : Ardayfio Samuel Nii Aryee Version : 1.52.01 Tested on : Ubuntu Descriptio...
log4j
Log4J Zero-Day Compilation of log4j OSINT findings, including Detection, Attack Surface, Mitigation, IoCs. I. Overview Summary This vulnerability makes it possible for any attacker who can inject text into log messages or log message parameters into server logs to load code from a remote server...