1281029 matches found
CVE-2020-14645
CVE-2020-14645 Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData Project depends on https://github.com/5up3rc/weblogiccmd Demo Require 1. JDK Version JDK6u211/7u201/8u191 2. Weblogic Version 12.2.1.4.0 Do not use illegally!!!!!!!! Reference 1...
raptor
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ β β β βββββββ ββββββ βββββββ βββββββββ βββββββ βββββββ β β ββββββββββββββββββββββββββββββββββββββββββββββββββ β β ββββββββββββββββββββββββ βββ βββ βββββββββββ β β βββββββββββββββββββββββ βββ βββ βββββββββββ β β βββ ββββ...
CVE-2023-36664-Ghostscript-command-injection
Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...
php2shell-POC
CVE-2026-109618 - "PHP2Shell" proof of concept Remote code ex...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
react2shell-scanner
π¨ React2Shell Scanner CVSS 10.0 RCE in React Server Components. Is your React 19 app vulnerable? Fast, accurate scanner for CVE-2025-55182 React2Shell - a critical remote code execution vulnerability exploited in the wild. Zero false positives with intelligent Server Components detection. π¨ About...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CVE-2025-3248-Langflow-RCE
CVE-2025-3248 β Langflow Unauthenticated Remote Code Execution Proof-of-Concept exploit for CVE-2025-3248 , an unauthenticated remote code execution vulnerability in Langflow, an AI/LLM workflow-building platform. Affected versions: Langflow 1.3.0 Fixed in: 1.3.0 Vulnerability class:...
react2shell-CVE-2025-55182-poc
CVE-2025-55182 React2Shell PoC with WAF Bypass A clean, reliable Python proof-of-concept exploit for CVE-2025-55182 aka React2Shell, a critical remote code execution vulnerability in React Server Components used by Next.js App Router and similar frameworks. This PoC includes dynamic WAF bypass...
CVE-2026-34159-Vulnerability-Research-Analysis-Detection
CVE-2026-34159-Vulnerability-Research-Analysis-Detection Critical buffer validation bypass in deserializetensor llama.cpp b8492. Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPHCOMPUTE. ASLR bypass + RCE over TCP 50052. Contains: Technical analysis & exploit...
juniper-rce_cve-2023-36844
CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 developed by @watchTowr to achieve Remote Code Execution in Juniper JunOS within SRX and EX Series products. Follow the watchTo...
kernel: xfs: bounds-check buffer log item's dirty bitmap
A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...
kernel: ALSA: seq: close a re-opened queue timer in the destructor
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...
android-reverse-engineering-skill
Android Reverse Engineering & API Extraction β Claude Code skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app β Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns β so you can document and reproduce them witho...
cve-2024-4577-lab
CVE-2024-4577 β PHP-CGI Argument Injection β RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection β Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...
defcon33_silence_kill_edr
π‘οΈ DEFCON Workshop: Putting EDRs in Their Place π Killing and Silencing EDR Agents Like an Adversary Setup EDR Killing Custom EDR Evasion π― What Youβll Do Each student will be provisioned their own lab environment to: π Investigate a live EDR agent: discover its hooks, logs, and reach βοΈ Compile &...
CVE-2026-21509-handler
CVE-2026-21509 Office Kill-Bit Manager PowerShell script to check, apply, and test the Kill-Bit protection for the CVE-2026-21509 Microsoft Office zero-day vulnerability affecting Office 2016/2019/LTSC. What is CVE-2026-21509? Critical RCE vulnerability in Microsoft Office OLE/COM handling CVSS...
0-click-RCE-Exploit-for-CVE-2024-50526
CVE-2024-50526 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin,...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
React2P4IM0Nshell
React2P4IM0Nshell π₯Extension Tool for Advanced RCE/Source Leak/Dos CVE-2025-55182/83/84 Auditing and Exploitation for Next.js and React Server Components RSC environments directly from your browser, with built-in linux terminal in the extension to receive any reverse shell β β‘ CMDCENTER: The Core...