765678 matches found
CVE-2025-55182
What is CVE-2025-55182? Also known as React2Shell, this vulnerability refers to a structural flaw in React Server Components where prototype pollution occurs during data deserialization, enabling RCE. Affected versions are React 19.0.0, 19.1.0, 19.1.1, 19.2.0, Next.js 15.x 15.0.0 15.5.6, 16.x...
CVE-2017-1000117
git-client-rce This PoC is only for educational purpose!!! Test GIT Repo for git-client-rce PoC CVE-2017-1000117 https://marc.info/?l=git&m=150238802328673&w=2 This CVE affects all the git clients v2.14.1 Execute following on test system to see PoC : $git clone --recursive...
CVE-2025-56795
CVE-2025-56795 Description Two stored Cross-Site Scripting XSS vulnerabilities were identified in the recipe creation functionality of Mealie , affecting all versions up to and including 3.0.1. Unsanitized user input provided during recipe creation is stored and later rendered in the frontend...
hot-jar-swapping-urlclassloader
URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. Tested on MacOS with OpenJDK And also...
CVE-2025-52691
CVE-2025-52691 This repository contains a safe Proof of Concept PoC to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability. CVE-2025-52691 – SmarterMail Version Detection PoC 📌 Description This...
POC-CVE-2026-18729
Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...
ENLBufferPwn
ENLBufferPwn CVE-2022-47949 CVE: | CVE-2022-47949 ---|--- CVSS v3.1: | 9.8/10 Critical Authors: | PabloMK7, Rambo6Glaz, Fishguy6564 Reported: | August 8th, 2021 Mario Kart 7 April 14th, 2022 for the impacted WiiU and Switch games Disclosed: | December 22nd, 2022 Table of contents Description...
ciscoasa_honeypot
Cisco ASA honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Contact: [email protected] A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability It is released under the MIT license for the use of the...
CVE-2025-1910-WatchGuard-Privilege-Escalation
WatchGuard Mobile VPN with SSL Client Privilege Escalation CVE-2025-1910 A privilege escalation vulnerability in WatchGuard's Mobile VPN with SSL MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Serve the malicious client.wgssl file via flask: Sta...
CVE-2022-46080
CVE-2022-46080 Nexxt Router 15.03.06.60 Authentication Bypass and Remote Command Execution...
CVE-2026-49160-CVE-2026-47291-HTTP.sys
CVE-2026-49160 & CVE-2026-47291 HTTP.sys PoC HTTP.sys Denial of Service Vulnerability HTTP.sys Remote Code Execution Vulnerability Due to GitHub's file size restrictions, demonstration videos for this PoC CVE-2026-49160 are hosted as attachments in the Releases. CVE-2026-47291 Vulnerable code: if...
CVE-2026-11645-Out-of-bounds-Read-Write
CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized testing. 📋 Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...
CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated
🏴☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research 📌 Overview This repository contains a comprehensive technical analysis and deobfuscation research of the Coruna iOS Exploit Kit. The research focuses on documenting how the exploit chain targets CVE-2024-23222 — a high-severity type confusion...
CVE-2019-0232
CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...
CVE-2023-6019
CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...
CVE-2025-32432
CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Authentication Remote Code Execution in Craft CMS Affected: Craft CMS 3.x, 4.x, and 5.x up to 5.6.16 Info: This exploit is tested against HackTheBox Orion machine Overview This repository contains a proof-of-concept exploit for CVE-2025-32432...
CVE-2022-29078
CVE-2022-29078 vuln ejs 3.1.6 docker Setup git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Usage http://127.0.0.1:49160/ Exploit In browser...
CVE-2023-35085-POC-EXP
PS: All the scripts are achieved by Gemini 2.5 pro and CLaude 3.7. It may doesn't work well, because I don't know how to use the api "/mifs/rest/api/v2/command/exec", the same as the AIs, who pretented that they know it very well...
wp2shell-poc-fulljs
WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...