713921 matches found
ship-safe
The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website Β· Docs Β· Security & Data Flow Β· Benchmark Β· Pricing Β· Blog Β· Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...
MASS-CVE-2024-27956
MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...
liffy
Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
CVE-2020-2883
CVE-2020-2883 First clone the framework git clone https://github.com/Y4er/CVE-2020-2555 Then place CVE20202883.java into the src/com/supeream/CVE20202883.java directory Import into IDEA and run CVE20202883.java for RCE! Screenshot...
Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777
This repository does not have a README...
OpenWire-CVE-2023-46604-Investigation
OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...
CVE-2023-6019
CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 β Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...
CVE-2019-5475-Nexus-Repository-Manager-
CVE-2019-5475-Nexus-Repository-Manager- Payload PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...
thm-ice-icecast-rce-privesc
TryHackMe β Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...
CVE-2025-65817
CVE-2025-65817 Fields| Value ---|--- Titre| Vulnerability Report: LSC Smart Connect Camera Date| 2024-02-15 Description| Abusing the SD-card update hook to spawn remote shells on LSC Smart Connect cameras. Tags| iot, vulnerability, cve Firmware| 1.14.13 Vulnerability Report on LSC Smart Connect...
CVE-2023-36845
CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...
NextRce
NextRce - Next.js RSC Exploit Tool CVE-2025-55182 Advanced Vulnerability Scanner & Exploiter for Next.js App Router Developed byMitsec π₯ New Feature: WAF Bypass Mode UTF-16LE Standard payloads containing keywords like childprocess or execSync are often blocked by Web Application Firewalls WAFs...
CVE-2026-11645-Out-of-bounds-Read-Write
CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit β οΈ WARNING This code is ONLY for educational purposes and authorized testing. π Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...
CVE-2025-67511
CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself Hacktive Security blog post for CVE-2025-67511 Blog Post Link : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR A command injection vulnerability in the function...
CVE-2017-1000117
CVE-2017-1000117 usage $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git when git has problem, ifconfig is executed...
langflow-CVE-2026-33017-poc
CVE-2026-33017 β Langflow Unauthenticated RCE PoC For educational and authorized testing purposes only. Summary Langflow = 1.8.1 exposes a public flow build endpoint that accepts attacker-controlled flow data containing arbitrary code. This code is passed to prepareglobalscope in validate.py, whi...
CVE-2026-34197
CVE-2026-34197 CVE-2026-34197 activemq PoC PoC for the ActiveMQ as per Horizon3 post https://horizon3.ai/attack-research/disclosures/cve-2026-34197-activemq-rce-jolokia/ krasn@icestorm cve-2026-34197-activemq % docker compose up -d krasn@icestorm cve-2026-34197-activemq % python3 exploitpoc.py au...
CVE-2023-36168
CVE-2023-36168 An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software...
CVE-2017-9101
PlaySMS 1.4 authenticated RCE Simple method of performing remote code execution through the Phonebook CSV upload issue as described on ExploitDB. Either run a single command: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token for login...