45415 matches found
CVE-2023-25690-POC
CVE 2023 25690 - Proof of Concept Published: 7 March 2023 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High Table of contents...
CVE-2023-1698
wagoexploit.py - PoC Exploit for CVE-2023-1698 🚀 About wagoexploit.py is a proof-of-concept PoC exploit for CVE-2023-1698 , a critical vulnerability affecting WAGO PLCs. This exploit grants the attacker shell access to the device, potentially exposing sensitive operations. ⚠️ Disclaimer: This...
CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE
CVE-2025-32433 - Erlang/OTP SSH RCE PoC Resumen PoC que muestra ejecución remota de código no autenticada en el servidor SSH de Erlang/OTP. Al explotar una falla en el manejo de mensajes del protocolo SSH, un atacante puede ejecutar comandos arbitrarios en el objetivo sin credenciales válidas. CV...
CVE-2022-42889-RCE
CVE-2022-42889-PoC Prueba de concepto para el exploit de ejecución remota de código CVE-2022-42889 Vulnerabilidad Text4Shell. Dale una ⭐ para apoyar ❤️ Acerca de esta vulnerabilidad CVE-2022-42889 es una nueva vulnerabilidad crítica similar a Spring4Shell y Log4Shell. Es una vulnerabilidad RCE...
CVE-2023-23752
CVE-2023-23752 Programa simple para el escáner de Joomla CVE-2023-23752. Este es un script Ruby simple que comprueba si una lista de objetivos es vulnerable a CVE-2023-23752, una vulnerabilidad de seguridad crítica en una aplicación web. El script envía una solicitud HTTP GET a un endpoint...
SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation
SOC227 - Microsoft SharePoint Server Elevation of Privilege CVE-2023-29357 Exploitation CVE-2023-29357 is a critical privilege escalation vulnerability that, when combined with other vulnerabilities, could potentially lead to remote code execution. The CVSS score for this vulnerability is 9.8...
CVE-2022-35978-POC
CVE-2022-35978 POC Description CVE-2022-35978 is a critical security vulnerability affecting Minetest versions up to and including 5.5.1. Minetest is a free, open-source voxel game engine that supports easy modding and game creation. In single-player mode, a mod can set a global setting that...
CVE-2023-25157
CVE-2023-25157 - GeoServer SQL Injection - PoC CVE: CVE-2023-25157 Date: 06/06/2023 Vendor/Software: GeoServer Severity: 9.8/10 - This script is a proof of concept for OGC Filter SQL Injection vulnerabilities in GeoServer, a popular open-source software server for sharing geospatial data. It send...
RuoYI-4.2-Shiro-721-Docker-PoC
RuoYI 4.2 Shiro 1.4.1 Shiro-721 Vulnerability Reproduction Environment Used to reproduce the Shiro-721 vulnerability CVE-2019-12422 on RuoYI. Note: This service contains critical vulnerabilities and is intended only for vulnerability reproduction purposes. Do not use in production environments...
Blackash-CVE-2025-14558
🚨 CVE-2025-14558 : Critical Remote Code Execution in FreeBSD IPv6 🧠 Overview CVE-2025-14558 is a critical Remote Code Execution RCE vulnerability affecting FreeBSD systems that use IPv6 router solicitation services. A flaw in how untrusted network input is handled allows attackers to execute...
CVE-2024-40898
CVE-2024-40898 Este script de Python verifica la presencia de CVE-2024-40898, una vulnerabilidad crítica en Apache HTTP Server que puede permitir la omisión de la verificación de certificados SSL/TLS bajo ciertas configuraciones incorrectas. Inicia una conexión SSL al servidor objetivo y envía un...
CVE-2026-58138
CVE-2026-58138 — Conductor 3.21.21..3.30.2 Unauthenticated Remote Code Execution Critical Remote Code Execution Vulnerability in Orkes Conductor 📋 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE vulnerability affecting Orkes Conductor versions 3.21.21 through 3.30....
CVE-2023-38408
CVE-2023-38408 PoC para la reciente vulnerabilidad crítica que afecta a las versiones de OpenSSH 9.3p2 Diseñado para funcionar sin problemas con el entorno de laboratorio de acceso gratuito de TryHackMe que cubre esta vulnerabilidad. https://tryhackme.com/room/cve202338408 NOTA: Esto no funcionar...
SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-
SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400- Introduction CVE‑2024‑3400 is a critical CVSS 10.0 command‑injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN‑OS, first disclosed on April 12, 2024 github.com+10 Investigatio...
CVE-2024-4879
CVE-2024-4879 ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024–4879, CVE-2024–5217, and CVE-2024–5178, affec...
CVE-2026-86218-N-central-IOC-Toolkit
CVE-2026-86218 — N-able N-central Pre-Authentication RCE | IOC & Detection Toolkit CVSS 10.0 Critical · Pre-Auth Remote Code Execution · Static Code Injection CWE-96 · Actively Exploited · CISA KEV -yellow Maintainer: @jithinkrishnanrs · Repo:...
CVE-2018-3245
Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introducción El 16 de octubre a nivel local, en la madrugada del 17 de octubre hora de Beijing, Oracle publicó oficialmente la Actualización Crítica de Parches CPU de octubre tercer trimestre, en la que se corrigió una vulnerabilidad de ejecución remota d...
CVE-2025-29927
CVE-2025-29927 Next.js Middleware Authorization Bypass The detection template for CVE-2025-29927 is now officially part of the Nuclei Templates repository. https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-29927-HEADLESS.yaml A critical vulnerability in...
cve-2025-29927
cve-2025-29927 CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles certain internal headers — specifically, the x-middleware-subrequest header...