CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...

docker-cve-2016-2107

docker-cve-2016-2107 Docker container implementing tests for CVE-2016-2107 - LuckyNegative20 About Dockerized test for CVE-2016-2107. Code written by Filippo Valsorda: GitHub zero to decryption blog explaining the vulenrabiltiy online CVE-2016-2107 test Update Current version is using static...

DKMC

Don't Kill My Cat DKMC WINDOWS 10 now limit the shellcode payload from running properly due to the need of a RWX page to decode and execute the shellcode. DKMC can be update the set a memory page with properly permission. Don't kill my cat is a tool that generates obfuscated shellcode that is...

backdoor.mirai.helloworld

Dasan GPON Router URL ? when adding a string after image...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

webp_Android10_r33_CVE-2023-1999

/ \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Description: WebP codec: library to encode and decode images in WebP format. This package contains the library that can be used in other programs to add WebP support, as well as the command line tools 'cwebp' and...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers...

WordPress Core 5.0.0 - Crop-image Shell Upload

WordPress through 5.0.3 allows Path Traversal in wpcropimage. An attacker who has privileges to crop an image can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring. i...

CVE-2022-30525

CVE-2022-30525 python CVE-2022-30525-POC.py -u http://sit.com Image...

CVE-2026-112892

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted Microsoft Paint MSP image file to an application that processes image pixels. Due to missing expansion limits during decompression, the run-length encoding RLE decoder expands image da...

EUVD-2026-108515

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

CVE-2019-11447

CVE-2019-11447 - PoC Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE. Installation Clone the repository and install the requirements. pip install -r requirements.txt Usage In order to upload an avatar you will require a CuteNews user account,...

Linux Distros Unpatched Vulnerability : CVE-2026-113786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter...

CVE-2022-45472

CVE-2022-45472 DOM Based XSS Software: CAE Learning Space Enterprise with Intuity License Image Version: 267r Patch Level: 639 Vulnerability: DOM Based XSS Description The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC by CRFSlick, discovered by AkkuS An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main&opt=personal...

CVE-2026-115424

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

CVE-2024-36057

CVE-2024-36057 - Koha Library Software CVE ID: CVE-2024-36057 Product: Koha Library Software Vulnerability Type: OS Command Injection CWE-78 CVSS Score: 9.8 Critical Affected Versions: Below 23.05.10 Credits: Karolis Narvilas Description Koha is an open-source integrated library system. A command...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2026-115424

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a...

WordPress-RCE-CVE-2019-8942

WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 Python3 implementation of the authenticated WordPress crop-image exploitation chain. The repository is organized around two independent workflows: a manual OSCP-style script and a fully automated script with an integrated reverse-shell...