1283623 matches found
CVE-2021-26084_PoC
CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...
Cisco-ASA-CVE-2025-20333-Scanner
CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...
CVE-2026-21852-PoC
Claude Code Vulnerability Educational Demo This project demonstrates three vulnerabilities disclosed by Check Point Research in Anthropic's Claude Code CLI tool. It is designed for cybersecurity students and researchers to understand how AI development tool supply-chain attacks work...
CVE-2025-24813-PoC-Apache-Tomcat-RCE
Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...
CVE-2026-17532-lab
CVE-2026-17532 Lab - Seraphinite Accelerator: unauth XSS โ 1-click RCE A Docker lab for CVE-2026-17532 , an unauthenticated reflected XSS in the WordPress plugin Seraphinite Accelerator that chains into remote code execution the moment a logged-in administrator opens one crafted link. Full writeu...
CVE-2024-5932
This post is a research article published by EQSTLab. โโ IMPORTANT โโ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...
CTT-NFS-Vortex-RCE
CTT-NFS-Vortex-RCE New Physics Disclosure This repository contains a full weaponized exploit for CVE-2026-21509 , targeting the Windows Network File System NFSv4.1 kernel-mode driver nfssvr.sys. CTT-NFS-Vortex-RCE CVE-2026-21509 โ ๏ธ Technical Advisory: New Physics Disclosure This repository contain...
CVE-2021-43811
CVE-2021-43811 awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811 NVD Description Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 us...
POC_CVE-2026-41940
POCCVE-2026-41940 Quick start python3 pocCVE-2026-41940.py -h Usage examples Scan one host python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain python3 pocCVE-2026-41940.py -u https://target.example:2086 --action list Run a shell command python3...
CVE-2026-3844
CVE-2026-3844 โ Breeze Cache = 2.4.4 Unauthenticated Arbitrary File Upload to RCE Overview Field| Value ---|--- CVE| CVE-2026-3844 CVSS| 9.8 Critical CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-434 โ Unrestricted Upload of File with Dangerous Type Plugin| Breeze Cache by Cloudways...
CVE-2022-27925
Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925...
CVE-2024-6387-poc-1
CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...
XSSight
WARNING: This page is only for education, every malicious purpose from the users that are using it, will be punished with law rules! XSSight Cross-site Scripting XSS Cross-site Scripting XSS is an attack technique that involves echoing attacker-supplied code into a user's browser instance. A...
C-Game-Modding-Utility
C/C++ Game Modding Utility This utility aims to make writing mods for 5th/6th generation console games in C/C++ easier. It handles all the tedious setup, letting you focus on actually writing code. No manual cross-compiler setup. No manual ISO rebuilding. No complicated testing workflows. Feature...
ai-code-review
๐ codereview AI-powered code review in your terminal. One command. Instant feedback. Catches security vulnerabilities, bugs, and bad patterns before they hit production. Install ยท Quick Start ยท Usage ยท Providers ยท Contributing What It Does codereview sends your code to an LLM and returns a...
PoC-CVE-2017-5638
PoC: Apache Struts2 CVE-2017-5638 Safe Educational Demo ๐ Overview This project is a Proof-of-Concept PoC for CVE-2017-5638 , a famous Apache Struts2 vulnerability that allowed attackers to execute arbitrary code on affected servers. โ ๏ธ This repository contains a safe, non-exploitative demo...
CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-
CVE-2026-34156 โ NocoBase Sandbox Escape RCE -orange Authenticated Remote Code Execution in NocoBase versions โค 2.0.26 via workflow sandbox escape. ๐ Description CVE-2026-34156 is a sandbox escape vulnerability in the NocoBase workflow engine. An authenticated attacker can create a malicious...
Eaton-UPS-Companion-Exploit
Overview The Eaton UPS Companion software checks for an update every single week over an insecure HTTP connection and evals the content of whatever is at the update URL. This allows an attacker to craft a JavaScript function which uses the low-level OS operations that already exist in the backend...