CVE-2026-119426

Versions of phpMyAdmin through 5.2.3 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is a CSRF token bypass occurring on non-AJAX POST requests sent to the /sql or /database/sql endpoints. A remote attacker can lure an authenticated victim into submitting a cro...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 is a critical remote code execution vulnerability in Microsoft Outlook versions including Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 before February 2024 patch. It allows an unauthenticated attacker to bypass Outlook’s Protected View by sending a specially crafted emai...

CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ OpenSSH...

CVE-2026-119408 n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

CVE-2026-119408

The n8n workflow automation tool is vulnerable to remote code execution in versions before 2.42.6, 2.43.3, and 3.0.1. The vulnerability exists within deprecated Function , Function Item , and LangChain Code nodes. When these nodes run outside of task runner isolation, authenticated users with per...

EUVD-2026-113792

n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated Function, Function Item, and LangChain Code nodes running outside task runner isolation. Authenticated users who can create, modify, or import workflows naming these hidden...

Argus-SAF

Argus-SAF: Argus static analysis framework This is official reporitory for the Argus-SAF. For test and play with Argus-SAF, you can fork from our Argus-SAF-playground project, which have the basic setup for a Argus-SAF enhanced project with demo codes of how to perform different kind of analysis...

CVE-2026-22014-GraphQL-Persisted-Queries-Injection-via-ID-Manipulation

CVE-2026-22014 – GraphQL Persisted Queries Injection via ID Manipulation Program Code Node.js // graphqlpersisted.js - Accepts persisted query IDs const express = require'express'; const graphqlHTTP = require'express-graphql'; const queries = "abc": "query user name " ; app.post'/graphql',...

cve-2021-44228-log4j-exploits

CVE-2021-4428 Reproduction This DEMO is a replication of the Log4j2 ultra-high-risk RCE vulnerability CVE-2021-4428, aiming to understand the harmfulness of this vulnerability and make targeted defenses based on your system's situation. Warning This DEMO is solely for technical research purposes...

PixelCode-Attack

Malicious PixelCode Delivery Technique Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing them inside images or videos. A lightweight loader retrieves the media file, reconstructs the original binary, a...

Log4Shell-CVE-2021-44228

Exploiting Log4Shell CVE-2021-44228: A Complete, Modern Demonstration Lab Log4Shell CVE-2021-44228 is one of the most impactful remote code execution vulnerabilities ever disclosed. It affects Apache Log4j 2 , a widely used Java logging framework, and allows attackers to execute arbitrary code by...

cdt-vulnsamba-deploy

CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...

CVE-2022-22965-PoC

CVE-2022-22965 Spring4Shell Proof of Concept Test the RCE Remote Code Execution in Spring Core​ Build the image BuildKit based build is required so you need to enable it. Easiest way is to set the DOCKERBUILDKIT=1 environment variable when invoking the docker build command, such as: $...

CVE-2024-9932-POC

CVE-2024-9932-POC Description: The Wux Blog Editor WordPress plugin is vulnerable to arbitrary file uploads due to insufficient file type validation in the wuxbtinsertImageNew function. Versions up to and including 3.0.0 are affected. This vulnerability allows unauthenticated attackers to upload...

MAGNOLIA-8281

MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...

DocViewerExploitApp

DocViewerExploit App - CVE-2021-40724 This is the source code to exploiting the Document Viewer by MobileHackingLab. About the Vulnerable App This is an exploit app for the MobileHackingLab DocumentViewer Abdroid App Dynamic Code Loading RCE challenge. This challenge emulates CVE-2021-40724...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

EXPLOIT-CVE-2026-56121

CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView gRPC Deserialization Unauthenticated remote code execution in Feast ⚠️ For authorized security testing and education only. Only run this against the bundled Docker lab or systems you own / are explicitly permitted to test. Unauthorized us...

CVE-2022-27502

RealVNC server up to 6.9.0 DLL Hijacking Exploit CVE-2022-27502 You can use pre-compiled version 64-bit of it from HERE Copy it to %TEMP% and initiate a repair of RealVNC Server from add or remove programs. It will write the output of whoami command in %TEMP%\output.txt If you want to change the...

CVE-2025-46811

SUSE Manager Exploit Toolkit CVE-CVE-2025-46811 Scanner & Exploiter 🚀 Features Multi-threaded vulnerability scanning Interactive root shell via WebSocket Single command execution mode Colored debug output Batch processing of targets 📦 Installation git clone...