37402 matches found
CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization
A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...
CVE-2026-112079
The hankcs HanLP library (up to version 2.1.0-beta.64 ) contains a remote deserialization vulnerability in the load_word2vec_as_vocab_tensor function located in hanlp/utils/torch_util.py . The flaw exists because the vectors.vocab argument can be manipulated to trigger deserialization of untruste...
rxerium-templates
A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. β οΈ Note: Date matching may be...
CVE-2025-49113
CVE-2025-49113 β Roundcube Remote Code Execution RCE PoC This repository contains a Proof-of-Concept PoC exploit for CVE-2025-49113 , a critical remote code execution vulnerability in Roundcube Webmail versions prior to 1.5.10 and 1.6.11. The vulnerability arises from insecure PHP object...
Modified-CVE-2020-10915-MsfModule
Modified-CVE-2020-10915-MsfModule THIS IS NOT AN ORIGINAL EXPLOIT. THIS IS AN AUDITED VERSION FOR A THM BOX Below are the links for the original, tryhackme box and my writeup for the box:...
CVE-2025-24813-vulhub
CVE-2025-24813-vulhub POC script for vulhub environment of CVE-2025-24813 Because many friends are confused about how to exploit this vulnerability, I wrote this script to help everyone with the exploitation in vulhub. Details: vulhub/tomcat/CVE-2025-24813 There is no directly exploitable chain i...
CVE-2022-0265
CVE-2022-0265 Put ysoserial.jar in the same directory. example python CVE-2022-0265.py 127.0.0.1 URLDNS "http://xxx.log."...
CVE-2024-24590
ClearML Exploit This repository contains a proof-of-concept exploit for a deserialization vulnerability in ClearML, allowing for remote command execution. This exploit demonstrates how to upload a malicious pickle artifact to ClearML to gain a reverse shell. Prerequisites Before you begin, ensure...
react2shell-vulnlab
React2Shell Tribune β VULNERABLE WEB APPLICATION LAB A modern Next.js web app themed as a news / blog portal for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional news portal built...
CVE-2025-24016
CVE-2025-24016 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...
CVE-2022-47986
CVE-2022-47986 Why This vulnerability is exploited in the wild. IceFire use this vulnerability to deploy the ransomware on targeted systems, i would like to help SOC/Blue teams to identify impacted systems and Pentesters/Red teams to exploit and report it. Description I propose pure python and ru...
CVE-2020-1947
CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction and Analysis Overview ShardingSphere is an open-source ecosystem under Apache, a set of distributed database middleware solutions composed of three independent frameworks: Sharding-JDBC,...
CVE-2019-18935-bypasswaf
CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...
CVE-2025-55182
React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...
CVE-2025-24813-PoC-Apache-Tomcat-RCE
Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...
React2Shell-CVE-2025-55182
CVE-2025-55182 β React2Shell Unauthenticated RCE in React Server Components via insecure deserialization of the Flight protocol. A single HTTP request is enough to execute arbitrary code on the server β no credentials, no prior access needed. / / / /| |/ / \ / / / / / / / / // / / // / // | //...
CVE-2026-34486
CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. Affected: 11.0.19+, 10.1.53+, 9.0.116+. Fixed in: 11.0.21, 10.1.54, 9.0.117. Found and reported by Bartlomiej Dmitruk striga.ai. Writeup:...
cve-2019-0604-SP2010-netv3.5
cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...
CVE-2025-53770-Exploit
π SharePoint WebPart Injection Exploit Toolkit π Exploit tool for SharePoint WebPart Injection via ToolPane.aspx, leading to .NET deserialization and potential remote code execution RCE. Developed by: @GOTOCVE π Overview This tool exploits a vulnerability in Microsoft SharePoint on-premises that...
CVE-2019-6446
CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...