ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

ezviz_lan_rce

ezvizlanrce यह रिपॉजिटरी SADProtocol goes to Hollywood वार्ता के स्लाइड्स और PoC वीडियो शामिल करती है, जिसे DEF CON 31 Hardware Hacking Village में प्रस्तुत किया गया था। आप कैमरे पर चलने वाले बाइनरी बनाने के लिए डॉकर इमेज और CVE-2023-34551 तथा CVE-2023-34552 के प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट भी पा...

CVE-2004-2687

CVE-2004-2687 DistCC Daemon Command Execution...

CVE-2020-11890

HK द्वारा निर्मित CVE-2020-11890: usergroup तालिका वर्ग में अनुचित इनपुट सत्यापन से टूटी हुई ACL कॉन्फ़िगरेशन से RCE तक पहुँच सकता है लिंक https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC प्रभावित संस्करण: 3.9.17 से...

Tenda-Router-VR-and-Exploit

Tenda-Router-VR-and-Exploit यह लेख दिखाता है कि कैसे मैंने AC15 V15.03.05.19 फर्मवेयर के वेबसर्वर को QEMU के साथ एमुलेट किया, इसे होस्ट ब्राउज़र से पहुंच योग्य बनाया, और कमांड निष्पादन प्राप्त करने के लिए एमुलेटेड rootfs के अंदर /goform/setUsbUnload हैंडलर CVE-2020-10987 का उपयोग किया। अवलोकन...

CVE-2023-41425

Wonder CMS RCE تنفيذ الأوامر عن بعد | | الوصف : XSS إلى RCE، Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF...

react2shell-lab

React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. ⚠️ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...

CVE-2025-55182

简体中文 | English This is an analysis, validation environment, and POC repository for CVE-225-55182 vulnerability. Learn the Vulnerability See this article 《CVE-2025-55182 Analysis.md》. Verify the vulnerability After setting up the test or debugging environment, run the script poc.py. If a calculato...

CVE-2026-9852

CVE-2026-9852 is a CSV injection vulnerability in Hitachi Energy SYS600 . Injected malicious formulas can modify or add data to exported spreadsheets, insert links, exfiltrate data, and in some configurations execute malicious code on the user's machine. Exploitation requires an attacker to creat...

CVE-2026-9852

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

EUVD-2026-70321

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

next88

next88 - React Server Components RCE Scanner High-performance Go implementation for detecting React Server Components RCE vulnerabilities CVE-2025-55182 & CVE-2025-66478. Features 🚀 High Performance : Compiled Go binary with goroutine-based concurrency 🔍 Multiple Detection Methods : Safe...

CVE-2022-47529

CVE-2022-47529 RSA NetWitness Platform EDR Agent / Incorrect Access Control - Code Execution During a security audit of the EDR agent I discovered a novel vector to tamper with the service with only standard user rights by targeting an insecure Win32 memory event object. Hijacking the service...

CVE-2022-26133

CVE-2022-26133 Information Description SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated...

CVE-2022-45299

CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...

CVE-2022-29078

THM Challenge: SSTI RCE...

CVE-2023-23333

CVE-2023-23333 SolarView Compact حتى الإصدار 6.00 — حقن الأوامر في downloader.php RCE nuclei-templates Burp Nuclei...

how-to-check-patch-secure-log4j-CVE-2021-44228

How-to-check-log4j-CVE-2021-44228 What is log4j ? LOG4J is a open-source Java-based Apache Software used for logging services. What is log4j Vulnerability CVE-2021-44228 ? The Log4j vulnerability allows remote code execution by simply typing a specific string into a textbox , works on every progr...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4: Code Execution via Laravel Configuration Injection blog post about the vulnerability https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ you can use this for ctf or just for learning have fun and May God bless you all...

CVE-2024-7954

CVE-2024-7954 This exploit will attempt to execute system commands on SPIP targets CVE-2024-7954. Overview This is a bulk scanning and exploitation tool for CVE-2024-7954: SPIP 4.2.8 allows unauthenticated attackers to launch RCE on SPIP targets. This tool is based on this Security Research. How ...