CVE-2026-98670

A flaw was found in the Linux kernel's Xilinx XADC driver. During device unbinding, an improper cleanup order allows interrupt requests IRQs to remain active after delayed work has been cancelled. A local user capable of detaching the device can cause an interrupt to schedule work that executes...

InfectPE

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...

CVE-2021-46422_RCE

CVE-2021-46422 RCE Installation git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt Put CVE-2021-46422 RCE.py into the pocsuite3\pocs directory cd pocs pocsuite3 Usage Single URL: pocsuite -r CVE-2021-46422 RCE.py -u url Multiple...

Vulnerability-Assessment-Exploitation-Lab

Vulnerability-Assessment-Exploitation-Lab Metasploitable 2 Penetration Testing Lab Executive Summary This project documents a successful, full-lifecycle penetration test against the Metasploitable 2 Linux environment. The assessment follows the Penetration Testing Execution Standard PTES , coveri...

Monitorizer

Monitorizer The Ultimate Subdomain Monitoring Framework Installation ❗ Disclaimer --- Admin users are able to execute code on the local server make sure to change the default password at otherwise use it at your own risk Using docker $ curl...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 This post is about CVE-2022–24992 my first CVE, which refers to a vulnerability in QRCDR's widely used QR-Code generator script. more info Best, n0lsec...

Two critical RCEs in PHP core

Cisco Talos is tracking the disclosure of two unauthenticated remote code execution RCE flaws in PHP core, dubbed "php2shell", triggered by a plain HTTP request and exploitable before any application code runs, affecting every PHP build since 5.4. Based on the entities involved in the disclosure,...

Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

Spring4Shell Threat Sandbox CVE-2022-22965 Overview This walkthrough documents the completion of the Sandbox Challenge focused on CVE-2022-22965, commonly known as Spring4Shell — a critical CVSS 9.8/10 remote code execution vulnerability affecting specific versions of the Spring Java framework. T...

Microsoft365_devicePhish

Microsoft365devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script that allows an attacker to conduct a phishing attack against Microsoft 365 OAuth Authorization Flow. Using this, one can connect to Microsoft's OAuth API endpoints t...

PHP2SHELL-POC

██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...

CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true" Enables log rotati...

Exploit for CVE-2026-109618

🛡️ Complete Report on the PHP "Upload Progress" Vulnerability...

CVE-2019-9193-Home-Lab

ENGLISH BELOW CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Lab นี้จำลองช่องโหว่ CVE-2019-9193 ที่เกิดใน PostgreSQL เวอร์ชัน 9.3 - 11.2 ซึ่งเปิดให้ user ที่เป็น superuser หรือมี role pgexecuteserverprogram สามารถใช้คำสั่ง: COPY ... FROM PROGRAM '' เพื่อรันคำสั่ง OS ได้โดยตรง ส่งผลให้เกิด Remot...

r2s

R2S - React2Shell Scanner A web-based vulnerability scanner for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Live Scanner: https://r2s.mxm0z.com About CVE-2025-55182 CVE-2025-55182 is a critical CVSS 10.0 vulnerability in the React Server...

COM-Code-Helper

COM-Code-Helper Two IDAPython Scripts help you to reconstruct Microsoft COM Component Object Model Code Especially malware reversers will find this useful, as COM Code is still regularly found in malware. ClassAndInterfaceToNames.py This IDAPython script scans an idb file for class and interfaces...

MAL-012

MAL-012: Reflected Cross-Site Scripting in Admin Console leading to Remote Code Execution in Payara Server A reflected Cross Site Scripting XSS attack was found in the Payara Admin Console. By convincing an admin user to access the malicious URL and click the “Choose File” button, an attacker can...

cve-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Overflow → RCE Remote code execution via a single SQL query targeting PostgreSQL's pgcrypto extension. The vulnerability is a heap buffer overflow in pgpparsepubencsesskey that allows corruption of PostgreSQL's internal MemoryContext allocator metadata,...

telnet-CVE-2026-24061

https://github.com/SafeBreach-Labs/CVE-2026-24061/blob/main/telnetrce.py you need to understand the code 2. Building working code without input, directly variable = '' The code must be compatible with every device, so you cannot use commands like os.system'command' 3. Adding a GUI via...

detect-secrets

detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...