784751 matches found
CVE-2019-11043
Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Vulnerability Overview PHP-FPM Remote Code Execution Vulnerability CVE-2019-11043 During the Real World CTF organized by Chaitin Tech, foreign security researcher Andrew Danau discovered while solving a CTF challenge that sending the %0a symbol to t...
CVE-2025-49844
CVE-2025-49844 – Use-After-Free Issue in Redis's Lua Parser In short and simple terms, you run this script and instead of localhost you provide the target IP and configure its port, it connects if it is vulnerable, and you can execute any command you want. In Shodan, you can also find vulnerable...
Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation
= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing – Technical Research & Proof-of-Concept Author: Sastra Adi Wiguna Purple Elite Teaming Research Date: January 2026 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8...
XworkStruts-RCE
XworkStruts-RCE CVE-2017-5638 XworkStruts RCE Vuln test script The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrar...
CVE-2026-20841
The accuracy of this PoC trigger method has not been verified, and it should be considered informational/reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Test on : Notepad Version 11.2510.14.0 step 1 : Save File step 2 : Open file Note: It does prompt to open progr...
laravel-crypto-killer
Laravel crypto killer A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications. This tool was firstly designed to craft payloads targeting the Laravel decrypt function from the package Illuminate\Encryption. It can also be used to decrypt any data encrypted...
CVE-2026-21514_CVE-2026-21510
CVE-2026-21514 & CVE-2026-21510 Builders 1; CVE-2026-21514 SBX bypass or Protected View Bypass Rebuild document package with obfuscated path to WindowsUpdateDiagnostic.xml inside word/rels/webSettings.xml.rels Pending Check other xml configs in path C:\Windows\diagnostics\index if they support th...
ENLBufferPwn
ENLBufferPwn CVE-2022-47949 CVE: | CVE-2022-47949 ---|--- CVSS v3.1: | 9.8/10 Critical Authors: | PabloMK7, Rambo6Glaz, Fishguy6564 Reported: | August 8th, 2021 Mario Kart 7 April 14th, 2022 for the impacted WiiU and Switch games Disclosed: | December 22nd, 2022 Table of contents Description...
CVE-2026-1306
CVE-2026-1306 — midi-Synth WordPress A Python-based, multi-target executable PoC / list runner for CVE-2026-1306 in the WordPress midi-Synth plugin. What does it do? Collects the midiSynthnonce value via HTTP from pages where the midiSynth shortcode is loaded on target sites. Sends an action=expo...
CVE-2024-36985
CVE-2024-36985 All the exploit codes are genetrated by gemini. Splunk admin role required. Splunkarchiver application enabled. You can also run below SPL in search to trigger the RCE. | copybuckets data=""providers": "pwnprovider": "command.arg.0":...
cve-2018-14634
cve-2018-14634 This is a exploit published for researchers discovered by cloud-based security and compliance solution provider Qualys Affect kernel versions 2.6.x, 3.10.x and 4.14.x To successfully exploit this vulnerability, attackers need to have access to the targeted system and run their...
Log4j2-CVE-2021-44228
CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web mvn dependency:treejava INFO | | +- org.springframework.boot:spring-boot-starter-logging:jar:2.6.1:compile INF...
CVE-2019-14811-in-pdf-exploit
CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...
loader-CVE-2020-14343
loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...
CVE-2026-22686-RemoteCodeExecution-RCE-PoC
RCE in ESM Environments — The require Problem When achieving sandbox escape via CVE-2026-22686, executing OS commands in an ESM project "type": "module" requires bypassing Node.js module loading restrictions. Standard approaches fail for the following reasons: Vector| Result ---|---...
CVE-2025-32432-PoC
CVE-2025-32432 Exploit Scripts Python PoC Pre-auth Remote Code Execution for CraftCMS 3.x / 4.x / 5.x PoC Maintainer: C.T.Y. research use only Vulnerability Discovery: Nicolas Bourras – Orange Cyberdefense Additional PoC Inspiration: SensePost research & Chirag Artani’s public script 1. Overview...
CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento
CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento CVE-2024-34102 CVE-2024-34102 is a severe security flaw arising from improper handling of nested deserialization in Adobe Commerce and Magento. This vulnerability permits attackers to exploit XML External Entiti...
CVE-2025-45466
CVE-2025-45466 It is the details of CVE-2025-45466 CVE Disclosure: CVE-2025-45466 Summary A vulnerability has been discovered in Unitree Go1 robotic dog all versions using the...