cve-2016-0728

cve-2016-0728 Exploit y comprobador...

Roundcube-CVE-2025-49113

Roundcube RCE Exploit CVE-2025-49113 A fully functional proof-of-concept exploit for CVE-2025-49113 🧠 Summary CVE-2025-49113 is an The vulnerability is the result of a logic flaw in the application's session parser, which allows insecure deserialization of PHP objects. Authenticated users can...

CVE-2026-33017-PoC-Reverse-Shell

CVE-2026-33017 - Langflow Unauthenticated RCE Exploit 📋 Overview CVE-2026-33017 is an unauthenticated Remote Code Execution RCE vulnerability in Langflow versions This exploit is for educational and authorized testing purposes only. Unauthorized access to computer systems is illegal. Use this too...

phuip-fpizdam

PHuiP-FPizdaM Qué es esto Esto es un exploit para un bug en php-fpm CVE-2019-11043. En ciertas configuraciones de nginx + php-fpm, el bug puede activarse desde el exterior. Esto significa que un usuario web puede obtener ejecución de código si tienes una configuración vulnerable consulta a...

CVE-2025-3248

CVE-2025-3248 — Langflow AI Remote Code Execution Unauthenticated Author: 0xgh057r3c0n Description This exploit targets a critical unauthenticated RCE vulnerability CVE-2025-3248 in Langflow AI. The vulnerability allows an attacker to execute arbitrary system commands on the target server via the...

CVE-2014-6287

Poc exploitbash script bash.webm About the exploit You can get reverse shell with .sh file in Linux You can get reverse shell with .py file in Windows and Linux in windows, you need to install netcat You must specify the url example: http://target.com/ using for .py: python exploit.py using for...

CVE-2026-89683

A flaw was found in the Linux kernel's nfsd NFS daemon. A remote attacker could exploit this vulnerability by sending a specially crafted NFSv3 filehandle targeting a V4ROOT export's file system identifier fsid. This action triggers a dentry reference leak, which can lead to resource exhaustion a...

CVE-2026-89490

A flaw was found in ocfs2, the Oracle Cluster File System, within the Linux kernel. On 32-bit kernels, an error in how directory cookie positions are calculated can lead to truncation when a directory exceeds 4 Gigabytes GiB in size. This truncation causes the system to repeatedly re-enumerate...

CVE-2026-89736

A flaw was found in the Linux kernel's USB audio gadget driver uaudio. This vulnerability occurs during sound card disconnection when Asynchronous Linux Sound Architecture ALSA control elements kctls remain open in userspace. A local attacker can exploit this timing issue by interacting with thes...

CVE-2026-89507

A flaw was found in the Linux kernel's RDMA/ucma component. A race condition exists in the ucmawritecmevent function where it re-reads a critical file pointer multiple times without proper locking. This allows another function, ucmamigrateid, to change the file pointer mid-operation. An...

mikrotik-beast

Herramienta Mikrotik Beast Herramienta de explotación masiva de MikroTik WinBox, CVE-2018-14847 Esta herramienta permite escanear un rango de hosts de red CIDR contra el exploit winbox CVE-2018-14847. Uso $ python3 mikrotikbeast.py Ejemplos de entrada aceptados Ejemplo 1: '192.168.5.0/24' Ejemplo...

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 - Apache = 2.4.48 - Exploit Python SSRF Una ruta de uri-path de solicitud manipulada puede hacer que modproxy reenvíe la solicitud a un servidor de origen elegido por el usuario remoto. Este problema afecta a Apache HTTP Server 2.4.48 y versiones anteriores. CVSS v3.1: Puntuación...

CVE-2025-55182-Exploit

CVE-2025-55182 — RCE por deserialización de Flight en Next.js Exploit de ejecución remota de código para la vulnerabilidad de deserialización de Server Actions Flight de Next.js 📌 Resumen Este repositorio contiene un exploit funcional para CVE-2025-55182 , una vulnerabilidad de deserialización en...

struts-rce-cve-2017-5638

struts-rce-cve-2017-5638 Struts-RCE CVE-2017-5638 This is a modified exploit that creates a webshell and provides a bash/cmd like interface to interact with the webshell in the console...

CVE-2017-18044-Exploit

CVE-2017-18044 POC Nativo Este es un POC extremadamente simple para la vulnerabilidad de inyección de comandos CVE-2017-18044 en Commvault v11 SP5 y anteriores. Para usuarios de Metasploit, también se incluye una versión en Ruby del exploit con la última compilación...

CVE-2026-89526

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

CVE-2018-15745

Argus Surveillance DVR 4.0.0.0 - Recorrido de Directorios Aviso legal Este código se proporciona únicamente con fines educativos y de investigación. El autor no es responsable del mal uso o los daños causados por este código. Usted es responsable de asegurarse de tener la autorización adecuada...

tryhackme-moniker-link

tryhackme-moniker-link Documentación de mi laboratorio práctico Moniker Link CVE-2024-21413 completado en TryHackMe. Moniker Link CVE-2024-21413 — Laboratorio de TryHackMe Resumen Este repositorio documenta mi estudio práctico en una sala de TryHackMe. El objetivo de este ejercicio era comprender...

CVE-2026-89766

A flaw was found in the Linux kernel. A local attacker could exploit a race condition in the pidfd subsystem, specifically within the PIDFDGETNAMESPACE ioctls. This vulnerability occurs because the system does not properly hold a lock execupdatelock during credential checks. This allows an attack...

CVE-2026-89732

A flaw was found in the Linux kernel's USB FunctionFS ffs module. A local attacker could exploit a deadlock vulnerability in the ffsep0read function. This occurs when a userspace daemon polls ep0 and the USB gadget is simultaneously torn down, causing the kernel to enter an unresponsive state. Th...