CVE-2026-4813

CVE-2026-4813 CVSS-B 9.4 CRITICAL Authenticated RCE via XSLT injection in Lutece Core Explanations and more on my website /xsl:styleshee...

collision-webshell

Webshell Collision This repository contains 2 files that have the same MD5 hash: webshell.php normal.php MD5 for the files: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php Hexdump for the webshell.php: $ hexdump -C webshell.php 00000000 3c 3...

Remote-DLL-Injection-with-Timer-based-Shellcode-Execution

Remote DLL Injection with Timer-based Shellcode Execution Documentation updated from previous mistake proces injection title! ⚠ Educational Research Only This repository contains security research for educational purposes and authorized use only. Use responsibly and in accordance with all...

WBCE-CMS-Stored-XSS---Pages-Menu

WBCE CMS Stored XSS v1.6.1 Author: Sergio Description: WBCE CMS 1.6.1 is affected by a Cross-Site stored scripting XSS vulnerability that allows attackers to execute arbitrary code via a payload crafted in the Intro Page parameter in the Pages menu. The payload will be executed on the main page...

CVE-2025-55182-React2Shell

React2Shell React2Shell es una prueba de concepto PoC de explotación que demuestra una vulnerabilidad CRÍTICA de ejecución remota de código RCE en marcos web modernos que usan React Server Components RSC. Esta PoC ataca CVE-2025-55182 , una vulnerabilidad con CVSS 10.0 que permite a atacantes...

OESA-2026-4130 unbound security update

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...

OESA-2026-4129 libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

OESA-2026-4056 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4055 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4053 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4054 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4032 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4028 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

CVE-2010-2075

CVE-2010-2075 - Backdoor en UnrealIRCd 3.2.8.1 Bash PoC Descripción PoC en Bash para la backdoor introducida en el tarball fuente de UnrealIRCd 3.2.8.1. El binario comprometido ejecuta comandos arbitrarios con el prefijo AB; enviados al puerto IRC. Uso chmod +x exploit.sh ./exploit.sh Ejemplo:...

android_demystification_toolbox

Android Demystification Toolbox Purpose ADT is a Miasm-based symbolic execution toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code. Features The ability to save/restore all threads & processes contexts A centraliz...

CVE-2025-55182

CVE-2025-55182 — React2Shell: Exploit Avanzado e Investigación de Tesis de Máster -brightred Deserialización de datos no confiables + contaminación de prototipos en React Server Components Ejecución remota de código sin autenticación a través de Next.js Server Actions Versiones afectadas: React...

CVE-2023-21716

CVE-2023-21716 — Corrupción de montón en Microsoft Word RTF fonttbl RCE Gravedad: Crítica CVSS 9.8 Afecta: Microsoft Word 2013 / 2016 / 2019 / 2021 sin parche Parche: Microsoft Patch Tuesday de febrero de 2023 Autor: REGGYRAIDER Resumen de la vulnerabilidad CVE-2023-21716 es una vulnerabilidad de...

CVE-2026-2699

CVE-2026-2699 — Progress ShareFile Storage Zones Controller Authentication Bypass Critical Authentication Bypass CVSS 9.8 in customer-managed Progress ShareFile Storage Zones Controller SZC ≤ 5.12.3. 📋 Overview CVE-2026-2699 is a severe authentication bypass vulnerability affecting the web...

CVE-2020-0796-RCE-POC

CVE-2020-0796 Prueba de Concepto de Ejecución Remota de Código c 2020 ZecOps, Inc. - https://www.zecops.com - Encuentra los errores de los atacantes Prueba de Concepto de Ejecución Remota de Código para CVE-2020-0796 / "SMBGhost" Resultado esperado: Shell inversa con acceso al sistema. Destinado...

octopus

Octopus Muchas gracias a QuoScient por patrocinar este proyecto. Octopus es un marco de análisis de seguridad para módulos WebAssembly y contratos inteligentes de Blockchain. El propósito de Octopus es proporcionar una manera fácil de analizar módulos WebAssembly de código cerrado y bytecode de...