RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Translate Module 원격 코드 실행 취약점...

Metasploit-Module-TFM

Custom Metasploit Module for CVE 2023-2728 and CVE 2024-3177 Description This custom module exploits CVE 2023-2728 and CVE 2024-3177 in Kubernetes versions that are vulnerables to each of them e.g. v1.27.2 is vulnerable to both, both related to bypassing the imposition of the mountable secrets...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

WonderCMS 4.3.2 XSS to RCE Exploits Overview These scripts exploit an XSS Cross-Site Scripting vulnerability in WonderCMS 4.3.2 to achieve Remote Code Execution RCE. The XSS payload, when triggered by the admin, automatically installs a reverse shell on the target server by leveraging a crafted...

CVE-2021-1675_CarbonBlack_HuntingQuery

CarbonBlack Hunting Query for CVE-2021-1675 PrintNightmare 1 Based on Sigma rule on detecting the POC code filemodname:c:\windows\system32\spool\drivers\x64\3\old\1\123 2 Based on Sigma rule on detecting the POC code modloadname:c:\windows\system32\spool\drivers\x64\3 OR...

CVE-2025-67435-PoC

CVE-2025-67435 Researcher : Chowdhury Faizal Ahammed PluckCMS Zip Slip Remote Code Execution Vulnerability Report Executive Summary This report documents a critical security vulnerability discovered in PluckCMS that allows authenticated attackers to achieve remote code execution through a Zip Sli...

CVE-2023-29809

Exploit Title: Unauthenticated SQL injection Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29809 Description: The vulnerabili...

CVE-2019-15107

CVE-2019-15107 Python implementation of CVE-2019-15107 Webmin 1.890-1.920 Backdoor RCE exploit Based on the Metasploit module for the same exploit EDB ID: 47230 Exploit is mostly automatic. See ./CVE-2019-15107.py --help for full range of switches Warning: The code in this repository may be used...

ane

Asahi Neural Engine Реверс-инжиниринговый драйвер Linux для Apple Neural Engine ANE. Здесь всё для Linux. ane/: Модуль ядра ane.ko. Скоро должен переехать в основное дерево. docs/: Документация. В работе. Пожалуйста, не смотрите. libane/: Пользовательская библиотека. python/: Привязки Python для...

asf__tapestry-5_CVE-2019-0207_5-4-4

This repository does not have a README...

CVE-2025-40019-Essiv

CVE-2025-40019-Essiv PoC для CVE-2025-40019 в модуле ESSIV. эксплойт в разработке для эксплуатации обратите внимание, что scatterlist как req-src, так и req-dst имеет член pagelink. Насколько я понимаю, pagelink — это способ кодировать информацию о sg-таблице вместе с указателем на страницу: gdb...

cve-2026-32475-elementor-pro-lab

CVE-2026-32475 — Elementor Pro Forms: неаутентифицированная произвольная загрузка файлов → RCE A/B Docker-лаборатория, воспроизводящая CVE-2026-32475 CVSS 9.x, Patchstack; поле File Upload в формах Elementor Pro, затронуты версии ≤ 4.2.1, исправлено в 4.2.2 от 2026-08-19; сообщил Tin Pham / TF1T...

CVE-2021-37787

CVE-2021-37787: SQL Injection in ABOCMS via TinyMCE Module Vulnerability Details CVE ID : CVE-2021-37787 Product : ABOCMS Affected Versions : 5.8.x, ≤5.9.3 Vulnerability Type : SQL Injection CVSS Score : 9.8 Description A critical SQL injection vulnerability exists in ABOCMS within the TinyMCE...

CVE-2025-3052

🐞 CVE-2025-3052: IhisiParamBuffer Memory Corruption This repository centralizes research material related to CVE-2025-3052, a memory corruption vulnerability in a UEFI module signed with Microsoft's third-party certificate that allows an attacker to corrupt security-critical firmware structures,...

CVE-2026-92084

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

CVE-2026-92084

The Beaver Builder Page Builder plugin for WordPress is vulnerable to unauthenticated arbitrary shortcode execution in all versions up to and including 2.11.0.5 . The root cause is the software's failure to properly validate a value before executing the do_shortcode function. This vulnerability c...

CVE-2026-92084 Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

EUVD-2026-91966

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

CVE-2026-32475

CVE-2026-32475 PoC: Elementor Pro Неаутентифицированная произвольная загрузка файлов с последующим RCE Неаутентифицированная произвольная загрузка файлов в Elementor Pro, приводящая к удалённому выполнению кода Proof-of-concept для CVE-2026-32475 — критической неаутентифицированной произвольной...