CVE-2024-21626-PoC

CVE-2024-21626 Root cause & Proof of Concept How to use poc-autoplay? make install make uninstall 1. Root cause In runc versions ≤ 1.1.11, when opening the host's /sys/fs/cgroup directory to set cgroups, the file descriptor is left open for the container initialization process without closing it,...

CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

CVE-2026-57155

OPNsense versions prior to 26.1.11 and 26.4.1p1 are vulnerable to Root Remote Code Execution (RCE) via an arbitrary file write in the Firewall Alias GeoIP importer . The root cause is an unvalidated CSV country_code value in the process_zip() and process_gzip() paths of src/opnsense/scripts/filte...

EUVD-2026-102114

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Description The WooCommerce Designer Pro plugin for WordPress, widely used especially in themes such as Pricom - Printing Company & Design Services, is vulnerable to arbitrary file uploads due to a lack of proper file...

CVE-2025-2249

🔐 WordPress SoJ SoundSlides Plugin ⚠️ DISCLAIMER: This exploit is for educational and authorized testing purposes only. 📌 Vulnerability Summary Plugin: SoJ SoundSlides Affected Versions: = 1.2.2 Type: Authenticated Contributor+ Arbitrary File Upload Patch Status: ❌ No official fix available The So...

jsPDF-Bulk-Detector-CVE-2025-68428-

🚨 jsPDF Bulk Detector – CVE-2025-68428 🚨 Asset-wide detection tool for identifying jsPDF usage related to CVE-2025-68428. Detection only — no exploitation. 🚨 Background A critical vulnerability was disclosed in the popular JavaScript PDF generation library jsPDF, tracked as CVE-2025-68428...

CVE-2024-9698

CVE-2024-9698 Crafthemes Demo Import = 3.3 - Arbitrary File Upload Exploit 📌 Overview This exploit targets a critical vulnerability CVE-2024-9698 in the Crafthemes Demo Import plugin for WordPress. The vulnerability allows authenticated administrators to upload arbitrary files to the affected...

CVE-2023-33733

CVE-2023-33733 on Reportlab v3.6.12 This lab was set up to test CVE-2023-33733. Analyzing process You can see our analyzing process about this CVE in PDF file on main repo. Setup and Run Server Setup pip3 install -r requirements.txt Run python3 app.py Attacker Connect to server Connect to server ...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. usage:...

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

CVE-2018-1263-Demo

Exploit Demo This guide will help you to install vulnerable component and perform the attack related to phpMyAdmin bug mentioned in CVE-2018-1263. Description of CVE Why does the vulnerability exist How does the attack work How to install vulnerable component How to perform the attack Description...

CVE-2025-55853

CVE-2025-55853 - Local File Inclusion via Server Side Request Forgery SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. About This PoC for CVE-2025-55853 demonstrates Server Side Request Forgery in the webPDF tool webPDF. used to convert files to PDF. The PDF...

php-cgi-Injector

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit Tool Automated testing tool for PHP-CGI parameter injection vulnerabilities , supporting CVE-2024-4577 and CVE-2024-8926 , with capabilities for command execution, file upload, download , etc. 📌 Introduction This tool can be used to test...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS 🛡️ Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers to...

CVE-2025-60012-POC

For educational and security research purposes only. Do not use against systems you do not own or have explicit written permission to test. →Full Disclaimer CVE-2025-60012 — Apache Livy Unauthorized File Access -yellow Overview Field| Detail ---|--- CVE ID| CVE-2025-60012 Severity| Medium CVSS 6....

CVE-2023-39141-LFI-enumerator

Enumerate remote server files by exploiting CVE-2023-39141 See POC: https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e...

CVE-2021-33558

CVE-2021-33558 Reference: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 Payload: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

Cve-2025-8088-WinRar-vulnerability

Cve-2025-8088 WinRAR Python tool that creates a malicious RAR file to exploit the CVE-2025-8088 vulnerability in WinRAR. The CVE-2025-8088 vulnerability allows exploitation of manipulated RAR files to cause path traversal and overwrite arbitrary files on the victim's system. This project is for...