CVE-2025-49132

CVE-2025-49132 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2025-49132, a critical unauthenticated remote code execution RCE vulnerability in Pterodactyl Panel versions prior to 1.11.11. Vulnerability Details CVE ID : CVE-2025-49132 Severity : 10.0 Critical -...

CVE-2023-38831-WinRAR-Vulnerability-Analysis

CVE-2023-38831-WinRAR-Vulnerability-Analysis This project is a cybersecurity research and analysis project focused on CVE-2023-38831, a critical WinRAR vulnerability that allows attackers to execute malicious code through specially crafted archive files. The project was conducted in a controlled...

CVE-2022-0847-DirtyPipe-Exploit

A vulnerability was found in Linux Kernel up to 5.10.101/5.15.24/5.16.10 Operating System and classified as critical. This issue affects some unknown processing of the component Pipe Handler. Impacted is confidentiality, integrity, and availability. The weakness was presented 03/08/2022. The...

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 Critical Microsoft SMBv1 Remote Code Execution Vulnerability 📌 Overview EternalBlue is a critical vulnerability in Microsoft's Server Message Block version 1 SMBv1 protocol that allows remote attackers to execute arbitrary code on vulnerable Windows systems without...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Dahua Authentication Bypass PoC Exploit Simulation CVE-2021-33044 Overview Dahua IP cameras are IoT devices commonly used in security surveillance systems. Since they are often deployed on internal networks or accessible from the Internet, security vulnerabilities in IP cameras can severely impac...

CVE-2025-14733

WatchGuard IKEv2 Scanner — CVE-2025-14733 Identify WatchGuard Firebox appliances vulnerable to CVE-2025-14733, a critical pre-authentication vulnerability in the Fireware OS IKEv2 implementation. This tool performs safe version detection through standard IKEv2 negotiation. It does not attempt...

CVE-2022-42889-RCE

CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote code execution exploit Text4Shell Vulnerability. Give a ⭐ for support ❤️ About this vulnerability CVE-2022-42889 is a new critical vulnerability similar to Spring4Shell and Log4Shell. Its a RCE Remote Code Execution vulnerability with...

cve-2024-3094-tools

CVE-2024-3094 XZ Backdoor Tools This repository contains tools for the XZ Backdoor vulnerability, also known as CVE-2024-3094. About CVE-2024-3094 CVE-2024-3094, also known as the XZ Backdoor, is a critical vulnerability discovered in the XZ data compression library. For more information about th...

CVE-2025-55182

👻 CVE-2025-55182 Go exploit Interactive RCE exploitation tool for CVE-2025-55182 React Server Components 🎯 What Is This? CVE-2025-55182 is a minimal, interactive RCE exploitation tool targeting CVE-2025-55182 , a critical vulnerability in React Server Components RSC affecting React 19.0.0 - 19.2....

CVE-2024-27198-SOC-Lab

CVE-2024-27198 — SOC Detection & Incident Response Lab Authentication Bypass in JetBrains TeamCity | CVSS Score: 9.8 Critical This project builds a complete SOC Lab environment to simulate, detect, and respond to CVE-2024-27198 — an authentication bypass vulnerability in JetBrains TeamCity...

CVE-2025-58434-poc

CVE-2025-58434 — Flowise Account Takeover via Token Disclosure ⚠️ This repository is for educational and authorized security research only. Unauthorized use against systems you do not own or have explicit permission to test is illegal. Table of Contents Overview Vulnerability Details Attack Flow...

React2Shell-CVE-2025-55182-Advanced-Scanner

CVE-2025-55182 Advanced Scanner Advanced penetration testing tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js applications 📋 Table of Contents Overview Features Installation Usage Examples Bypass Techniques Technical Details Disclaimer Contributing License 🔍 Overview...

nginx-rift-scanner

nginx-rift-scanner Dependency-free Python 3 scanner for CVE-2026-42945 "NGINX Rift" — a CVSS v4.0 9.2 CRITICAL heap-based buffer overflow CWE-122 in ngxhttprewritemodule. What it detects Two independent checks are run on every invocation: Check| How ---|--- Version| nginx -V, dpkg/rpm/apk,...

NGINX-Rift

NGINX Rift — CVE-2026-42945 / CVE-2026-9256 Vulnerability Scanning and Verification Tool NGINX Rift is an open-source scanning and verification tool targeting CVE-2026-42945 and CVE-2026-9256 heap overflow vulnerabilities in NGINX ngxhttprewritemodule. It supports remote network fingerprint...

CVE-2024-3400

CVE-2024-3400: OS Command Injection Vulnerability in GlobalProtect Gateway Severity: CRITICAL 10/10 ⚠️...

CVE-2023-25690-POC

CVE 2023 25690 - Proof of Concept Published: 7 March 2023 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High Table of contents Advisory Description Vulnerable Apache Configuration Breakdown Data Flow Lab Setup HTTP Request Splitting causing HT...

cve-2021-3007-vulnerable

CVE-2021-3007 Vulnerable Test Environment Intentionally vulnerable test environment for validating CVE-2021-3007 detection in security scanners. Vulnerability Overview Attribute| Value ---|--- CVE ID| CVE-2021-3007 Severity| Critical CVSS 9.8 Type| Insecure Deserialization → RCE Affected| Laminas...

Cve-2024-38063

CVE-2024-38063 Description This repository contains details and potential exploit code for CVE-2024-38063, a critical Windows TCP/IP Remote Code Execution RCE vulnerability. The vulnerability allows an unauthenticated attacker to execute arbitrary code on the target system through specially craft...

CVE-2026-41179

CVE-2026-41179 — rclone RC API Unauthenticated RCE ⚠️ EDUCATIONAL PURPOSES ONLY This repository is intended strictly for security research, education, and authorized lab environments. PSSec and the contributors of this repository do not condone, support, or take any responsibility for any...