CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...

rxerium-templates

A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. ⚠️ Note: Date matching may be...

CVE-2025-49113

CVE-2025-49113 – Roundcube Remote Code Execution RCE PoC This repository contains a Proof-of-Concept PoC exploit for CVE-2025-49113 , a critical remote code execution vulnerability in Roundcube Webmail versions prior to 1.5.10 and 1.6.11. The vulnerability arises from insecure PHP object...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule THIS IS NOT AN ORIGINAL EXPLOIT. THIS IS AN AUDITED VERSION FOR A THM BOX Below are the links for the original, tryhackme box and my writeup for the box:...

CVE-2025-24813-vulhub

CVE-2025-24813-vulhub POC script for vulhub environment of CVE-2025-24813 Because many friends are confused about how to exploit this vulnerability, I wrote this script to help everyone with the exploitation in vulhub. Details: vulhub/tomcat/CVE-2025-24813 There is no directly exploitable chain i...

CVE-2022-0265

CVE-2022-0265 Put ysoserial.jar in the same directory. example python CVE-2022-0265.py 127.0.0.1 URLDNS "http://xxx.log."...

CVE-2024-24590

ClearML Exploit This repository contains a proof-of-concept exploit for a deserialization vulnerability in ClearML, allowing for remote command execution. This exploit demonstrates how to upload a malicious pickle artifact to ClearML to gain a reverse shell. Prerequisites Before you begin, ensure...

CVE-2025-24016

CVE-2025-24016 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...

CVE-2022-47986

CVE-2022-47986 Why This vulnerability is exploited in the wild. IceFire use this vulnerability to deploy the ransomware on targeted systems, i would like to help SOC/Blue teams to identify impacted systems and Pentesters/Red teams to exploit and report it. Description I propose pure python and ru...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction and Analysis Overview ShardingSphere is an open-source ecosystem under Apache, a set of distributed database middleware solutions composed of three independent frameworks: Sharding-JDBC,...

CVE-2019-18935-bypasswaf

CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...

CVE-2025-55182

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...

CVE-2026-34486

CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. Affected: 11.0.19+, 10.1.53+, 9.0.116+. Fixed in: 11.0.21, 10.1.54, 9.0.117. Found and reported by Bartlomiej Dmitruk striga.ai. Writeup:...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

CVE-2025-53770-Exploit

📌 SharePoint WebPart Injection Exploit Toolkit 🍕 Exploit tool for SharePoint WebPart Injection via ToolPane.aspx, leading to .NET deserialization and potential remote code execution RCE. Developed by: @GOTOCVE 🌍 Overview This tool exploits a vulnerability in Microsoft SharePoint on-premises that...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...

CVE-2024-44902

CVE-2024-44902 Vulnerability description A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. Affects Version Thinkphp v6.1.3 to v8.0.4 Exploit condition The thinkphp framework should have installed the Memcached extension. Vulnerability...

CVE-2025-53770

Divine Absolute - CVE-2025-53770 Exploit Tool Overview Divine Absolute is a sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770 , a critical CVSS 9.8 unauthenticated remote code execution RCE vulnerability in on-premises Microsoft SharePoint Server 2016, 2019, Subscription...

CVE-2022-41853

Research into CVE-2022-41853: Using static functions to obtian RCE via Java Deserialization & Remote Codebase Attack Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default ...