php2shell-poc

CVE-2026-109618 / CVE-2026-109619 — PHP upload-progress RCE P...

CVE-2025-9090

CVE-2025-9090 Author: Byte Reaper Description This exploit targets CVE-2025-9090 , a command injection vulnerability in the Tenda AC20 v16.03.08.12 router. The flaw is in the endpoint /goform/telnet, which can be triggered remotely. When accessed, it starts the Telnet service on the device, openi...

CVE-2026-7567-POC

Description This repository contains a Proof of Concept PoC for CVE-2026-7567. The vulnerability affects Wordpress Temporary Login Plugin = 1.0.0 and allows an attacker to authentication bypass to account takeover. I only developed the exploit/PoC for educational and research purposes. How to use...

CVE-2022-22963

CVE-2022-22963 Spring Cloud Function SpEL Expression Injection Remote Code Execution Vulnerability Detection and Exploitation Tool. Vulnerability Overview CVE-2022-22963 is a high-severity RCE vulnerability CVSS 9.8 in the routing functionality of Spring Cloud Function. When the application enabl...

php2shell-toolkit

php2shell-toolkit Internal tooling for checking whether our w...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637 — AppleSEPKeyStore Use-After-Free CVE-2026-20637 · Enfilade · enfilade.io Component: AppleKeyStore Impact: An app may be able to cause unexpected system termination. Description: A use after free issue was addressed with improved memory management. —Apple Security Content, iOS 26.3...

CVE-2025-52021

CVE-2025-52021 — Time-Based Blind SQL Injection in PuneethReddyHC / Online Shopping System Advanced v1.0 CVE: CVE-2025-52021 Title: Time-Based Blind SQL Injection via productid parameter in editproduct.php Vendor / Repo: PuneethReddyHC —...

cve-2026-31431-ansible

CVE-2026-31431 "Copy Fail" — Ansible Mitigation Recipe Detect and apply the kernel-cmdline mitigation for CVE-2026-31431 "Copy Fail" across a Debian / Ubuntu / RHEL-family fleet using Ansible. The CVE is a local privilege-escalation flaw in the Linux kernel's algifaead AFALG interface. Any...

CVE-2026-39987_exploit

🔥 CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Exploitation Framework | Full Remote Code Execution RCE | WebSocket Auth Bypass 🧠 To know the commands more Open the file website.html 🎯 Overview This exploit targets Marimo applications running WebSocket on port 2718 default. The vulnerability allow...

Centreon-Exploits-2026

Exploits for CVE-2026-2749, CVE-2026-2751 and CVE-2026-2750 This repository contains exploits for CVE-2026-2749, CVE-2026-2751, and CVE-2026-2750 in Centreon, exploiting Path Traversal, SQL Injection, and Command Injection vulnerabilities. Vulnerable Versions All versions prior to 25.10 24.10 24....

Exploit for CVE-2026-109618

php-oom-corruption-lab Research lab, verification tooling and...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

exploit-CVE-2026-2670

exploit-CVE-2026-2670 CVE-2026-2670 – Advantech WISE-6610 Command Injection PoC Proof-of-concept exploit demonstrating a command injection vulnerability in the Advantech WISE-6610 industrial cellular router. The vulnerability exists in the /cgi-bin/luci/admin/openvpnapply endpoint and allows an...

Exploit for CVE-2026-97859

REDEEMER’S UNIVERSITY, EDE FACULTY OF COMPUTING AND DIGITAL TECH...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Author Mohammed Idrees Banyamer Security Researcher GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Description CVE‑2026‑26335 is a critical unauthenticated remote code execution vulnerability in...

CVE-2026-42167-PoC

CVE-2026-42167 POC Pre-Authentication Remote Code Execution in ProFTPD via modsql SQL Injection Author: Van Glenndon Enad Original Discovery: ZeroPath Published: May 1, 2026 Severity: Critical CVSS v3.1 Score: 8.1 CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS v2 Score: 7.6...

cve-2025-54874-poc

Reference https://github.com/uclouvain/openjpeg/pull/1573 https://www.cvedetails.com/cve/CVE-2025-54874/ https://securitylab.github.com/advisories/GHSL-2025-057OpenCV/ Test Env openjpeg-2.5.1 Linux 6.10.14-linuxkit x8664 GNU/Linux Description the function call chain is: opjreadheader →...

CVE-2026-7669-PoC

CVE-2026-7669 SGLang silently overrides trustremotecode=False to True and re-invokes AutoTokenizer.frompretrained whenever transformers v5 returns a TokenizersBackend object. A model with a custom tokenizerclass and an automap pointing at tokenizer.py reaches arbitrary code execution inside the...

DVDR_LLM

DVDR-LLM: When Are LLMs Better Together for Software Vulnerability Detection and Repair? Official implementation and artifact for the research paper: "DVDR-LLM: When Are LLMs Better Together for Software Vulnerability Detection and Repair?" 🎯 Overview DVDR-LLM is an ensemble framework that...

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Summary PIL.EpsImagePlugin.Ghostscript builds the Ghostscript command line using the input file path fp.name without sanitization, placing it at -f . A filename beginning with - is interpreted by Ghostscript as an option, giving command-line argument injection; chainable to RCE see Impact...