CVE-2026-105438 O2OA General url ActionUploadExcelWithUrl server-side request forgery

A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /xgeneralassemblecontrol/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack...

CVE-2026-105438

A Server-Side Request Forgery (SSRF) vulnerability exists in O2OA versions up to 10.0.1-ce . The flaw is located in the General Module within the function ActionUploadExcelWithUrl at the file path /x_general_assemble_control/jaxrs/excel/upload/with/url. An attacker can achieve SSRF by manipulatin...

CVE-2026-105438 O2OA General url ActionUploadExcelWithUrl server-side request forgery

A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /xgeneralassemblecontrol/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack...

CVE-2026-105438 O2OA General url ActionUploadExcelWithUrl server-side request forgery

A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /xgeneralassemblecontrol/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack...

NGINX-Rift

NGINX Rift — CVE-2026-42945 / CVE-2026-9256 Vulnerability Scanning and Verification Tool NGINX Rift is an open-source scanning and verification tool targeting CVE-2026-42945 and CVE-2026-9256 heap overflow vulnerabilities in NGINX ngxhttprewritemodule. It supports remote network fingerprint...

CVE-2026-27654

CVE-2026-27654 NGINX ngxhttpdavmodule Desbordamiento de búfer en el montón mediante subdesbordamiento de sizet Denegación de servicio remota / Potencial ejecución remota de código Descripción ngxhttpdavcopymovehandler en src/http/modules/ngxhttpdavmodule.c calcula la longitud de la URI de destino...

CVE-2026-90194

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI scan module. When a device fails to add, the system's rollback process does not properly clean up allocated bus IDs and instance numbers. This oversight can lead to a resource leak, potentially causing a Denial...

CVE-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

CVE-2016-5639

CVE-2016-5639 Módulos de Metasploit para Crestron AirMedia AM-100: Traversal y Hashdump Dos módulos similares que aprovechan CVE-2016-5639 para volcar hashes y recuperar archivos mediante traversal de rutas. Hice estos módulos por separado porque quería experiencia escribiendo algo que pudiera...

CVE-2020-1938-MSF-MODULE

CVE-2020-1938-MSF-MODULE Versión modificada de auxiliary/admin/http/tomcatghostcat, Lee cualquier archivo Sobrescribe el archivo /metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb y reinicia msfconsole para ejecutar reloadall. Luego puedes usar el módulo...

CVE-2015-2900-Exploit

CVE-2015-2898-2901, CVE-2015-6006 Exploit POC y módulo de Metasploit Este es un exploit de prueba de concepto para la versión 2.22.20142.166 y anteriores del motor MEDCIN medcinserv.exe o medcinservv22.exe. Se pueden encontrar más detalles sobre las vulnerabilidades en:...

CVE-2026-42945

CVE-2026-42945 - Análisis y reproducción de la vulnerabilidad NGINX Rift Resumen CVE-2026-42945 nombre en clave "NGINX Rift" es una vulnerabilidad de desbordamiento de búfer en el montón en ngxhttprewritemodule de NGINX, con una puntuación CVSS v4 de 9.2 Crítica. La vulnerabilidad fue descubierta...

CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...

CVE-2026-88393

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE ¿Qué es esto? Este es un módulo de metasploit para Metasploit. Ya tengo este módulo. Sí, está empaquetado en metasploit. Pero con ese módulo no puedes obtener ejecución arbitraria de comandos. Es decir, solo puedes establecer payloads de shell...

CVE-2018-4878

Módulo de Metasploit para CVE-2018-4878 El archivo SWF se basa en el PoC de Michael Gorelik. Copia CVE-2018-4878.swf a data/exploits...

CVE-2026-38751

CVE-2026-38751 — OpenSTAManager Module Upload RCE Authenticated RCE via unvalidated ZIP upload in the module update endpoint. Affected: OpenSTAManager = 2.10.x Requirements pip install requests Usage Reverse shell Penelope or any listener python3 exploit.py -u http://TARGET -U admin -P admin...

CVE-2026-28672

CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder OS command injection Runnable proof-of-concept reproducer for the OS command injection in Apache Ranger's user-sync unixusersync module. While enumerating the groups of each synced user, UnixUserGroupBuilder runs the id command through a shell,...

CVE-2024-38473

Prueba de Concepto PoC para el Problema de Codificación en modproxy en Apache HTTP Server Este repositorio contiene scripts de Prueba de Concepto PoC para demostrar un problema de codificación en el módulo modproxy de Apache HTTP Server versiones 2.4.59 y anteriores. Esta vulnerabilidad permite q...