CVE-2026-101043 pnpm 11.0.0 before 11.11.0 Environment Variable Exfiltration via Proxy Settings

pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand $VAR environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project's pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the...

TokenPlayer

TokenPlayer Manipulando y abusando de los tokens de acceso de Windows. TokenPlayer es solo una pequeña herramienta que hice para aprender programación de la API de win32 y entender mejor el modelo de tokens de acceso de Windows. Características: Robar y suplantar tokens primarios. Suplantar...

CVE-2023-0830

CVE-2023-0830: EasyNAS 1.1.0 Authenticated OS Command Injection Exploit This Python script is a powerful exploit for EasyNAS version 1.1.0 with enhanced functionality, including an integrated listener. The vulnerability exploited is a command injection flaw, which requires authentication. The...

richfaces-vulnerability-cve-2018-12533-rf-14310

Demonstrates the flaw present in RichFaces 3.3.4 of remote code execution and how to mitigate and/or block Attack example Clone the repository Decoding the payload Deserializing the Java class Generating a payload to test the vulnerability How to mitigate? If you really need this endpoint If you...

CVE-2025-70341

CVE-2025-70341: Insecure Permissions + Arbitrary Code Execution in App-Auto-Patch Summary App-Auto-Patch v3.4.2 creates its working directory with world-writable permissions chmod 777, enabling a local TOCTOU time-of-check-time-of-use race condition. An unprivileged local attacker can exploit thi...

CVE-2024-0195

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0195 Run bellow command to check CVE-2024-0195 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2025-49113-PoC

CVE-2025-49113 Roundcube RCE PoC 🚀 Cómo ejecutar el proyecto 1. Iniciar el servidor vulnerable cd Stand docker-compose up -d 2. Ejecutar el script contra el objetivo cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test --command "id" 📌 Requisitos...

bissap

bissap %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

pfsense-security-research

Lectura Arbitraria de Archivos Autenticada en pfSense 2.8.0 a través de la Interfaz Web de Diagnóstico ID de CVE: CVE-2025-53392 Fecha: 2025-06-27 Autor: Seth Kraft Página web del proveedor: https://www.netgate.com/ Registro de cambios del proveedor:...

ParrotSec-Linux-Hardening-Project

ParrotSec Linux - Proyecto de Kiosco Público Diseñando e Implementando un Entorno Restringido y Confiable Kernel endurecido - Kernel parcheado con GrSecurity - Endurecimiento PaX - x PaXctl - x PaXTest - x PaXctld - x Parámetros de tiempo de ejecución del kernel endurecido - x Kernel Self...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Vulnerability Research RAPTOR Loop-Hunt A security audit of Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a performed with the RAPTOR loop-hunt methodology: deterministic recon → 25 isolated generator agents reading raw source → 22 independent judge agents...

cve-2020-23127-PoC

cve-2020-23127-PoC CVE-2020-23127: https://www.cvedetails.com/cve/CVE-2020-23127/ Introduction This is my first CVE proof of concept and analysis. It was done as part of my cyber-security course on my 2nd year of Master in Computer Sciences at Université de Franche-Comté. I looked specifically fo...

KindaRails2Shell

KindaRails2Shell: CVE-2026-66066 Un proof of concept de un solo archivo y sin dependencias, más un laboratorio Docker aislado en loopback para la vulnerabilidad de lectura arbitraria de archivos en Rails Active Storage/libvips. También demuestra la escalación condicional del aviso desde una...

CVE-2024-23897

Usando el cliente La sintaxis general para invocar al cliente es la siguiente: java -jar jenkins-cli.jar -s JENKINSURL global options... command command options... arguments... info :- https://www.jenkins.io/doc/book/managing/cli/downloading-the-client CVE :-...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Affected Versions 'PaperCut MF or NG version 8.0 or later excluding patched versions on all OS platforms.' Summary This POC uses an authentication bypass vulnerability chained with abuse of builtin scripting functionality to execute...

CVE-2023-43208-PoC

CVE-2023-43208 - Mirth Connect Unauthenticated RCE Requirements Python 3.11 or higher tested on 3.11, 3.12, 3.13 Setup Create a clean virtual environment python3 -m venv .venv source .venv/bin/activate Install pinned dependencies pip install -r requirements.txt Usage Check version only python3...

CVE-2025-55182-PoC

CVE-2025-55182 - PoC & Stand 📌 Inicio rápido 1. Desplegar el Stand vulnerable cd Stand docker compose up --build La aplicación vulnerable se ejecuta en: http://localhost:3011 2. Ejecutar el escáner PoC seguro cd PoC/src poetry install poetry run python scanner.py http://localhost:3011 ✅ Salida...

Blackash-CVE-2025-32023

CVE-2025-32023 - Redis Remote Code Execution RCE 🚨 🧠 Overview: A critical RCE vulnerability affecting Redis 7.2.4, where attackers can load malicious modules using the MODULE LOAD command. 🕳️ Vulnerability Type: Remote Code Execution RCE 💥 Impact: An unauthenticated attacker can execute arbitrary...

CVE-2022-46649

CVE-2022-46649 Exploit PoC para CVE-2022-46649, una vulnerabilidad de inyección de comandos en el endpoint /cgi-bin/iplogging.cgi. La vulnerabilidad permite a atacantes autenticados ejecutar comandos arbitrarios del sistema operativo a través de parámetros tcpdumpParams manipulados. Resumen...

CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Voltronic Power SNMP Web Pro 1.1 This tool exploits CVE-2026-44402 , a vulnerability in the Voltronic Power SNMP Web Pro 1.1 device that allows unauthenticated...