24438 matches found
CVE-2021-41277
CVE-2021-41277 Usage 1. show help info /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default 10 -u string Target to...
xinhu-v2.3.2
Xinhu v2.3.2 Debugging environment for CVE-2023-1773 Added debug parameters for the webmain/task/api/reimplatAction.php file, allowing data before and after encoding to be returned to the front-end Xinhu v2.3.2 source code rainrocka/xinhu at cb732f46f8f1e4614c8cfbef47a0bcbde6ecce34 For the specif...
CVE-2026-96512
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm - Sudo Project I am @abraxasnull. Local lab, not HTTP. The client is CVE-2026-96512-Abraxas-Labs.py. NOTBEFORE / NOTAFTER timestamps without a trailing Z go...
CVE-2024-4577-PHP-RCE
CVE-2024-4577-PHP-RCE Project Introduction and Principle The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment XAMPP. The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment. Sharing original exploit, supports SSRF, supports WA...
CVE-2024-32019-PoC
CVE-2024-32019-PoC Bash script for Privilege Escalation via "ndsudo" Netdata Local Exploit Netdata Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 Vulnerability Description The "ndsudo" tool runs a restricted set of external commands, but the search paths are supplied by the "PATH"...
CVE-2023-28121
CVE-2023-28121 Research notes and helper material for studying CVE-2023-28121 in a controlled WordPress/WooCommerce Payments lab. Safety Notice Use this material only in systems you own or have explicit authorization to test. Keep vulnerable WordPress and plugin versions inside an isolated local...
CVE-2026-42055
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
fastjson-rce-lab
Fastjson 1.2.83 RCE Lab Environment CVE-2026-16723 Disclaimer: This lab is intended solely for security research, teaching demonstrations, and defense construction in authorized environments. Testing unauthorized targets without permission may be illegal; users bear all responsibility for the...
CVE-2025-34299-lab
CVE-2025-34299 Test Environment Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Authentication Remote Code Execution vulnerability. Vulnerability Details Field| Value ---|--- CVE ID| CVE-2025-34299 Severity| Critical CVSS 9.8 CWE| CWE-434 Unrestricted Upload of File with Dangerous Typ...
CVE-2026-35585-poc
CVE-2026-35585: File Browser OS Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-35585 , a critical OS Command Injection vulnerability discovered in File Browser versions 2.0.0 through 2.33.1. The vulnerability exists in the "Custom Command Hooks"...
MagicMirror <= 2.35.0 - Server-Side Request Forgery
An unauthenticated Server-Side Request Forgery SSRF vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requests to internal networks, cloud metadata services, and localhost services. The endpoint also expands environment...
CVE-2026-24061
Telnet Vulnerability Scanner & Exploiter This Python script main.py is a multi-threaded tool designed to scan a list of target IPs/hostnames and attempt to exploit a specific vulnerability over Telnet. !WARNING This tool is intended for educational purposes and authorized penetration testing only...
Exploit for OS Command Injection in Gnu Bash
CVE-2014-6271 Shellshock xpl0ited by infrar3dhttps://githu...
LOAD
Intro Based on AWS-Redteam-Lab and OCD GOAD The price for running the lab for 125 hours during one month is approximately 14$. With Free Tier you get 750h of EC2 per month, there is 6 machines so 125h. But you only get 30Gb of storage. So you need storage for the other 5 VMs : 30Gb 5 = 150Gb = 14...
CVE-2026-69263
CVE 2026-69263 What CVE 2026-69263 is a patch bypass of the old RCE vulnerability patched back in August of 2025. The patch introduced a Denylist that blocked installation of arbitrary packages. How Since npm reads config from environment variables, setting the npmconfigyes=true environment...
cve-2020-14644
cve-2020-14644 cve-2020-14644 Vulnerability Environment...
nginx-ui-CVE-2026-42221-CVE-2026-42238-
nginx-ui CVE Verification Environment This repository is for actually verifying two CVEs reported for nginx-ui Nginx's Web GUI management tool in a Docker environment. CVE-2026-42221 : Unauthenticated administrator account takeover CVE-2026-42238 : Command execution via unauthenticated backup...
vulnerable-code-snippets
Vulnerable Code Snippets Vulnerabilities | Programming languages | Run a vulnerable code snippet | Installation | Update YesWeHack present code snippets containing several different vulnerabilities to practice your code analysis in a safe dockerized envoriment. The vulnerable code snippets are...
GoTEE-example
Introduction The GoTEE framework implements concurrent instantiation of TamaGo based unikernels in privileged and unprivileged modes, interacting with each other through monitor mode and custom system calls. With these capabilities GoTEE implements a TamaGo based Trusted Execution Environments TE...