w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 Ejecución remota de código en w3 total cache cve 2013-2010 Uso: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" Salida: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import requests...

CVE-2025-59712_CVE-2025-59713

PoC para CVE-2025-59712 y CVE-2025-59713 Este PoC proporciona un script automatizado para explotar CVE-2025-59712 XSS en la cabecera User-Agent y CVE-2025-59713 deserialización insegura. Contexto Estas dos vulnerabilidades fueron descubiertas por Synacktiv durante la investigación de...

POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution

⚠️🚀 CVE-2025-24813 — Apache Tomcat RCE Exploitation Suite ⚡ Version: 1.0 🛡️ CVE ID: CVE-2025-24813 Apache Tomcat RCE 🧬 Payloads: ysoserial / Java 🌐 Mode: Interactive + Stealth 🔬 Usage: Ethical, Investigative, Educational 🌌 Overview This tool has been designed as a futuristic exploitation suite...

CVE-2022-37706

CVE-2022-37706 The CVE-2022-37706 vulnerability is related to the Enlightenment window manager, specifically the enlightenmentsys binary. This binary has the SUID Set User ID bit enabled, meaning it can be executed with elevated privileges usually as the root user. Summary: Vulnerability :...

CVE-2021-24092

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

static-code-analysis-helper

Static-Code-Analysis-Helper Descripción Detecta funciones que probablemente causen metodologías de ataque en muchos lenguajes de programación web y frameworks de tu carpeta de proyecto. Te ayuda a realizar análisis de código estático. Nota : Muchas de las funciones descritas aquí pueden no causar...

CVE-2021-3281

CVE-2021-3281 There is a Directory Traversal vulnerability in django.utils.archive.py, lineno:171, in Class TarArchive. The function call os.path.jointopath, name didn't check the param "name",if someone use this util on windows platform,there'll be a Directory Traversal risk, the POC is: from...

React2Shell

@React2Hell — CVE-2025-55182 漏洞利用 🔥 Next.js / React 服务端远程代码执行 RCE 漏洞利用 █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ▄▄▄▄▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██▄▄ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ▄▄▄███ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ MAGENTA Next.js/React 服务端 RCE 漏洞利用 —...

Form-Tools-3.1.1-RCE

Form-Tools-3.1.1-RCE CVE-2024-22722 RCE via SSTI Automation with Python. Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application. This script automates the creation of ...

PoC-CVE-2019-1003030

PoC de Bypass del Sandbox de Seguridad de Scripts de Jenkins 2.63 Este proyecto automatiza la creación y entrega de cargas útiles Groovy al endpoint de validación SecureGroovyScript de Jenkins utilizado por Jenkins 2.63. La herramienta admite tanto la ejecución interactiva como la de un solo uso...

Node_CVE-2023-29017

CVE-2023-29017 | 通过vm2沙箱逃逸实现远程代码执行 WHS 4期 31班 - 金建宇@gunwoo105 漏洞摘要 vm2是一个Node.js沙箱库，用于在受限环境中执行不可信的JavaScript。正常情况下，沙箱内部的代码不应能够访问Node.js的process、require、childprocess以及主机文件系统等敏感功能。 然而，在vm2...

CVE-2019-9053-working-

CVE-2019-9053-working script- CMS Made Simple 2.2.10 - SQL Injection . Actual working version Updated the script to work with latest python versions Added Exception Handling for each function You can also calibrate time.sleep inside the exception handling blocks depending on response and connecti...

CVE-2025-60787

CVE-2025-60787 — motionEye Authenticated RCE Authenticated command injection PoC for CVE-2025-60787. motionEye v0.43.1b4 and earlier write user-controlled camera configuration values such as imagefilename into Motion configuration without sufficient sanitization, allowing command execution when t...

CVE-2026-38526-KrayinCRM-RCE

CVE-2026-38526 - Krayin CRM RCE xpl0ited by infrar3d This is a Remote Code Execution RCE proof-of-concept specifically designed for Krayin CRM v2.2.x, an open-source customer relationship management system. The script automates the exploitation of a file upload vulnerability in the CRM's...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC heap overflow → RCE PoC Proof-of-concept for a remotely triggerable heap buffer overflow in Knot Resolver's DNS-over-QUIC DoQ receive path that yields remote code execution as the knot-resolver service user. Component: kresd DoQ listener daemon/quicconn.c...

CVE-2025-68055-poc

CVE-2025-68055 Authenticated SQL injection in Hydra Booking Plugin get function, Hydra Booking hardcodes user input directly into the raw sql request instead of using prepare to sanitize input, leading to Time-Based Blind SQL injection. Exploit A simple run command as such will tell you whether o...

bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — Unauthenticated RCE in MindsDB Minds Platform / MindsHub Cowork PoC for CVE-2026-73678 CVSS 3.1 10.0 Critical , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Full write-up: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ The Cowork...

CVE-2007-2447-Exploitation-SIEM-Detection-Lab

🛡️ CVE-2007-2447 Exploitation & SIEM Detection Lab Wazuh + MITRE ATT&CK B.Tech Project BTP | IIIT Pune Based on: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi A fully functional cybersecurity home lab built on a single machin...

CVE-2024-56426

SM-G985F / Exynos9830 Bootrom exploit !CAUTION The current key bundle and generated files are fusing-capable. Once a device has been fused, the eFuse change is irreversible and the device must continue to use boot images and key material that match the fused key. Using these files or flows is at...

CVE-2026-6471

🐘 CVE-2026-6471 — PostGREShell 🛢️ A critical security vulnerability that has been present in PostgreSQL for 12 years has been discovered! A defensive, non-destructive vulnerability checker for CVE-2026-6471 📌 Overview CVE-2026-6471 is a PostgreSQL authorization vulnerability involving the logical...