CVE-2026-17583

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2021-2109

CVE-2021-2109 Weblogic Server Remote Code Execution Vulnerability Reproduction and Analysis In January 2021, Oracle released a security update patch, including 329 new security patches in the Oracle product family. This announcement specifically mentioned the Oracle WebLogic Server security...

CVE-2017-10271

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with echo output Direct shell upload Tested on Linux with weblogic 10.3.6.0 OK Usage and Parameters python...

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controll...

shiro

CVE-2026-49268 — Analysis and Remediation of an LDAP Injection Authentication Bypass Vulnerability | ---|--- Branch| 1.13-CVE-2026-49268 Author| Jinwoo Hwang https://JinwooHwang.com This branch 1.13-CVE-2026-49268 contains a comprehensive security remediation of an LDAP Injection Authentication...

CVE-2026-32996

CVE-2026-32996 Veeam Remote Code Execution RCE on the Backup Server by an authenticated domain user. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC root@kitploit: CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

CVE-2026-10144 Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...

CVE-2026-10144

Rsbuild before 2.0.9 contains a command injection vulnerability in the openBrowser() function (packages/core/src/server/open.ts). The function passes a URL through encodeURI() before interpolating it into a shell command executed via child_process.exec(). Because encodeURI() does not encode dolla...

CVE-2026-10144 Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection → post-index-change → Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...

CVE-2026-39987_PoC

CVE-2026-39987-PoC Disclaimer This script is for educational and authorized testing purposes ONLY. Unauthorized use of this tool against systems without explicit permission is ILLEGAL. The author is not responsible for any misuse of this information. Marimo versions prior to 0.23.0 have a critica...

DG-Home1

Authenticated OS Command Injection in ElphaPex DG Home1 Web Fi...

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 Authentication Bypass Exploit Overview This is a Python3 exploit script for CVE-2025-41646 , an Authentication Bypass vulnerability affecting RevPi Webstatus = 2.4.5. Vulnerability Details: CVE ID : CVE-2025-41646 Affected Product : RevPi Webstatus = 2.4.5...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL Injection → PostgreSQL-superuser RCE SQL injection in the myInAppChannels:list action of NocoBase's @nocobase/plugin-notification-in-app-message ≤ 2.0.60. The filterlatestMsgReceiveTimestamp$lt request parameter is interpolated directly into a raw Sequelize.literal S...

Detect-CVE-2017-0144-attack

Python Program to Detect CVE-2017-0144 Attack Python program tasked with continuously monitoring network traffic in real-time. It will alert on the console when it detects a CVE-2017-0144 EternalBlue attack 1. Lab Model This lab is performed on 3 virtual machines in VMWare. 1 attacker machine Kal...

CVE-2020-0069_poc

Description This repository contains the materials we used to investigate CVE-2020-0069 on a Xiaomi Redmi 6a with a Mediatek SoC MT6762M. There are three programs: kernelrw.c a C program allowing to read/write kernel memory poc.sh a shell script syscallhook.c a C library that can be used to trace...

nuclei-burp-plugin v1.1.4

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 This is an exploit for CVE-2017-7047, a logic error in libxpc which allowed malicious message senders to send xpcdata objects that were backed by shared memory. Consumers of xpc messages did not seem to expect th...

CVE-2016-3238-PoC

CVE-2016-3238-PoC Whitepaper for CVE-2016-3238/MS16-087 Proof Of concept. CVE-2016-3238 allows man-in-the-middle attackers to execute arbitrary code by providing a crafted print driver during printer installation, aka "Windows Print Spooler Remote Code Execution Vulnerability."...