CVE-2026-92084 Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

CVE-2026-92084 Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

CVE-2026-32475

CVE-2026-32475 PoC: Elementor Pro Subida Arbitraria de Archivos No Autenticada a RCE Subida Arbitraria de Archivos Pre-Autenticación en Elementor Pro que Conduce a Ejecución Remota de Código Prueba de concepto para CVE-2026-32475, una subida arbitraria de archivos no autenticada crítica en el...

YARA_for_config_extraction

YARA Module Development and Config Extraction Blog Overview This repository contains the source code and content for my blog post on YARA Module Development and Config Extraction. In this blog, here is my guide into the process of creating a YARA module dedicated to extracting configurations. Blo...

Azure-AD-Incident-Response-PowerShell-Module

Azure AD Incident Response PowerShell Module The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team DART, to assist in compromise response. Why u...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Bootloader-Unlock-Free KernelSU Root CVE-2026-43499 temporary root → LDPRELOAD channel bypasses DEFEX → no-LTO clang-12 build of kernelsu.ko → full su + KernelSU Manager functionality Status: ✅ Verified on real device 2026-08-12 firmware F9360ZCSAIZF1, kernel...

CVE-2025-42944

CVE-2025-42944 Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution,...

PIL-RCE-By-GhostButt

Explotando la vulnerabilidad de ejecución de comandos del módulo Python PIL Ataca aplicaciones Python desarrolladas con PIL y logra el efecto de ejecución remota de comandos. Este proyecto se utiliza para almacenar el paper y el código fuente y los Dockerfile utilizados en los experimentos. Paper...

cve-2025-55182-react2shell_reproduction

CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth Remote Code Execution in React Server Components Discovered by Chinese threat actors. Actively exploited by China-nexus APT groups. Overview Dubbed "React2Shell" , this vulnerability enables unauthenticated remote code execution via unsaf...

lodash.template-fixed

lodash.template v4.5.0 The Lodash method .template exported as a Node.js module. Installation Using npm: $ sudo -H npm i -g npm $ npm i --save lodash.template In Node.js: var template = require'lodash.template'; See the documentation or package source for more details...

CVE-2026-92084: Improper Control of Generation of Code

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before...

PT-2026-104552

Name of the Vulnerable Software and Affected Versions The Beaver Builder Page Builder – Drag and Drop Website Builder versions prior to 2.11.0.6 Description The plugin allows unauthenticated attackers to execute arbitrary shortcodes because the software fails to properly validate a value before...

Driver-PiDqSerializationWrite-Example

PiDqSerializationWrite-Example Gracias busybox10 por compartir conocimiento sobre funciones de utilidad y funciones "PiDqSerializationWrite" con la comunidad. https://www.unknowncheats.me/forum/3742948-post13.html CPP struct memcpystructure void destination; unsigned int maxsize; unsigned int...

Hunt-Weird-ImageLoads

Hunt-Weird-ImageLoads This project was created to play with different IOCs caused by Imageload events. It leverages ETW to monitor for ImageLoad events and walks the callstack to identify some possible IOCs, such as: RWX page in callstack Stomped module in callstack Module proxying ntdll -...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...

CVE-2014-6271-IPFire

CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire =2.15 ShellShock RCE Based on the Metasploit module for the same exploit EDB ID: 34839 Exploit is automatic. See ./CVE-2014-6271.py --help for a full range of switches Warning: The code in this repository may be used for academic/ethic...

MSF-Testing-Scripts

Metasploit Module Testing Scripts This repo contains code required to test some of the Metasploit modules I've helped write. brocadeemulator.py Metasploit Module: auxiliary/scanner/telnet/brocadeenablelogin juniperssg5emulator.py Metasploit Module: auxiliary/scanner/ssh/juniperbackdoor.rb Also se...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC for the deserialization vulnerability in the Flight protocol of React Server Components. What is it? Next.js 14+ and React 19 use a proprietary protocol "Flight" to communicate between client and server. The problem: the server loads any module without...

CVE-2026-80099

CVE-2026-80099 PoC Bypass de autenticación no autenticado y exploit de RCE dirigido a plugins de WordPress de Newfold que incluyen wp-module-data. Descripción general Esta herramienta explota un fallo de validación de token Bearer en el módulo wp-module-data de Newfold. Cuando un sitio de WordPre...

CVE-2026-104721 Logback: Incomplete protection against CVE-2026-19880

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...