CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

React2Hell

🧨 React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React Server Remote Code Execution RCE Exploit █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ Next.js/React Server RCE Exploit —...

EUVD-2026-88137

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing, before authentication. The servlet is...

CVE-2026-82384 Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing, before authentication. The servlet is...

CVE-2026-82384 Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing, before authentication. The servlet is...

CVE-2026-82384

Apache Roller 6.1.5 is vulnerable to an unauthenticated remote code execution (RCE) flaw due to the deserialization of untrusted data (CWE-502). The XmlRpcServlet accepts vendor extension types (e.g., ex:serializable) which are deserialized during request parsing before any authentication occurs....

CVE-2026-82384 Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing, before authentication. The servlet is...

CVE-2025-55182

CVE-2025-55182 https://github.com/user-attachments/assets/0da9a623-fe2a-4a96-8192-7a07a76635d7 React2Shell Scanner - Extensión de Burp Suite Descripción React RCE Scanner es una extensión de Burp Suite diseñada para detectar y explotar la vulnerabilidad de React CVE-2025-55182 ejecución remota de...

Linksys-WRT54GL-Exploitation

Del soldador a la shell: explotación completa del hardware del router Linksys WRT54GL CVE-2022-43973 Un viaje de investigación de seguridad embebida en 10 fases: desde el descubrimiento de pines JTAG hasta la ejecución remota de código en un router doméstico basado en MIPS. | ---|--- Autor| Umber...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC Una vulnerabilidad crítica en Microsoft SharePoint Server permite la ejecución remota de código no autenticada mediante la deserialización de datos no confiables. Microsoft está al tanto de la explotación activa; aplique las mitigaciones de CVE de...

CVE-2021-29267

CVE-2021-29267 SherlockIM ChatBot XSS Suggested description: SherlockIM is vulnerable to Persistent XSS. Additional Information: SherlockIM - Platform for manage all kind of conversations with customers. Vulnerability Type: Cross Site Scripting XSS A letter was sent to the vendor about the...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – Inyección SQL no autenticada a RCE en FreePBX PoC Este repositorio contiene dos scripts de Prueba de Concepto PoC en Python dirigidos a CVE-2025-57819 , una vulnerabilidad crítica de inyección SQL no autenticada en FreePBX. 🧠 Acerca de la vulnerabilidad CVE-2025-57819...

Geutebrueck_GCore_X64_RCE_BO

GeutebrueckGCoreX64RCEBO Metasploit module for Geutebrueck GCore "video management" system. Tested with version 1.3.8.42 and 1.4.2.37. Full remote code execution with NT/System privileges on Windows Win 2012R2,Win8.1,... with the installed Geutebrueck products GCore. Authors:...

mjet

mjet Mogwai Security Java Management Extensions JMX Exploitation Toolkit mjet es una herramienta que puede utilizarse para proteger servicios JMX configurados de forma insegura. Se basa en el artículo "Exploiting JMX-RMI" de Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi"...

CVE-2018-7602

CVE-2018-7602 A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - High...

CVE-2022-21907

CVE-2022-21907 Vulnerabilidad en la pila de protocolo HTTP que permite la ejecución remota de código y un posible bloqueo del sistema. Tabla de contenidos CVE-2022-21907 Descripción Entorno Configuración de la máquina víctima Configuración de la máquina atacante Exploit Prueba de concepto...

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Ejecución Remota de Código RCE...

win-exec-calc-shellcode

win-exec-calc-shellcode Shellcode pequeño y libre de NUL que ejecuta calc.exe. Se ejecuta en versiones x86 y x64 de Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, todos los service packs. Tamaños build 306 plataforma | tamaño | alineación de pila | envoltorio de función | func+guardar regs |...

-CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

dockerevil

dockerevil Un repositorio simple para almacenar mis fallas de seguridad en la tecnología docker 2016 - 2017 Escalada de Privilegios en la API de DockerLPE/RPE Escalar desde servidor sin conexión/imágenes mínimas/construir desde Dockerfile TAR Escalada de Privilegios de SUDO en Docker PoC Scripts ...