CVE-2023-38646

CVE-2023-38646 针对 CVE-2023-38646 的 Python RCE 漏洞利用程序 使用方法 启动监听器 nc -lvnp 运行漏洞利用程序 python3 CVE-2023-38646.py -u -l -p 帮助 python3 CVE-2023-38646.py -h usage: CVE-2023-38646.py -h -u URL -l LHOST -p LPORT optional arguments: -h, --help show this help message and exit -u URL, --url URL...

CVE-2014-7205

Bassmaster NodeJS Plugin RCE PoC bassmaster-rce.py: Un script en Python para explotar CVE-2014-7205. nodeshell.py: Un módulo Python para generar una reverse shell para NodeJS !!Úselo solo contra servidores en los que tenga permiso para realizar pruebas Resumen CVE-2014-7205 es una vulnerabilidad ...

drupalgeddon2

drupalgeddon2 Exploit para CVE-2018-7600. Uso: drupalgeddon2 opciones -h: Url target -c: OS command Ejemplos: drupalgeddon2.py -h http://www.victim.com -c 'ls -la' Basado en https://github.com/FireFart/CVE-2018-7600...

CVE-2023-27524-POC

CVE-2023-27524: Bypass de autenticación en Apache Superset Script para comprobar si un servidor Apache Superset es vulnerable a CVE-2023-27524 y, si lo es, forjar una cookie de sesión con el userid = 1, que normalmente es el usuario admin, lo que permite omitir la autenticación y obtener acceso a...

CVE-2024-4577-Exploit

Exploit de CVE-2024-4577 Exploit de la vulnerabilidad de inyección de argumentos en PHP CGI CVE-2024-4577 para lograr la ejecución remota de código RCE en una versión vulnerable de PHP que se ejecuta en un entorno Windows, descubierta por Orange Tsai. Para más detalles, consulta el Blog de DEVCOR...

POC-CVE-2025-55182

CVE-2025-55182 高级扫描器 一款针对 CVE-2025-55182 的全功能利用工具——远程代码执行，攻击目标为 Next.js 中的 React 服务端组件。 该扫描器自动构造 multipart 载荷，并利用 process.mainModule.require'childprocess'.execSync 在易受攻击的实例上实现任意操作系统命令执行。 功能 自动载荷生成器——无需手动编码 命令执行，附带干净的 STDOUT 提取 自动协议检测（缺失时自动添加 https://） 正确的 URL 解码 + 换行恢复 彩色富输出，便于操作员快速反馈 错误指纹识别（500 ...

CVE-2019-7214

CVE-2019-7214 Exploit Title: SmarterMail...

CVE-2026-100699

Nodemailer is a Node.js email-sending library. In versions = 9.1.0 and 10.0.9, the address parser src/addressparser mishandles addresses whose local-part is a quoted string and that are followed by RFC 5322 comments, allowing trailing comment-separated domain atoms to be retained in the normalize...

EUVD-2026-87668

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

CVE-2026-100695

Adminer before version 6.0.2 is vulnerable to a cross-site scripting (XSS) flaw because the CONNECTION_ID() database result is interpolated into JavaScript without proper escaping. This allows a malicious database server to execute arbitrary JavaScript within the authenticated Adminer origin. In ...

EUVD-2026-87655

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink validation. Attackers with BUILDER role can craft a malicious ZIP with leaf symlink entries followed by duplicate file entri...

CVE-2026-100682

Budibase Server versions prior to 3.45.0 are vulnerable to an arbitrary file write vulnerability within the PWA icon upload endpoint . The root cause is a lack of proper symlink validation during the extraction of user-supplied ZIP archives. An attacker with the BUILDER role can exploit this by c...

CVE-2026-100682 Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink

Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upload endpoint that extracts user-supplied ZIP archives without proper symlink validation. Attackers with BUILDER role can craft a malicious ZIP with leaf symlink entries followed by duplicate file entri...

EUVD-2026-87740

SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3.8.3, the kernel's authentication guards CheckAuth in kernel/model/session.go and IsSessionOriginAllowed in kernel/util/net.go fail open when the HTTP Origin header is absent, on the incorrect assumptio...

CVE-2026-100646

The SiYuan personal knowledge management system (versions up to and including 3.8.3 ) is vulnerable to an authentication bypass because the kernel's authentication guards—specifically CheckAuth in kernel/model/session.go and IsSessionOriginAllowed in kernel/util/net.go—fail open when the HTTP Ori...

CVE-2026-100646 SiYuan before v3.8.4 Authentication Bypass via Missing Origin Header

SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3.8.3, the kernel's authentication guards CheckAuth in kernel/model/session.go and IsSessionOriginAllowed in kernel/util/net.go fail open when the HTTP Origin header is absent, on the incorrect assumptio...

EUVD-2026-87733

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/gutter/index.ts from content pasted as plain-text Markdown containing a Kramdown inline attribute list IAL. Because the...

CVE-2026-100639 SiYuan before v3.8.4 Cross-Site Scripting via Kramdown IAL

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/gutter/index.ts from content pasted as plain-text Markdown containing a Kramdown inline attribute list IAL. Because the...

CVE-2026-100639

SiYuan v3.8.3 is vulnerable to a Cross-Site Scripting (XSS) flaw due to a failure to HTML-escape the data-subtype attribute during gutter-button markup generation. This occurs when content containing a Kramdown inline attribute list (IAL) is pasted as plain-text Markdown. The shared Lute renderer...

CVE-2026-100639 SiYuan before v3.8.4 Cross-Site Scripting via Kramdown IAL

SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup app/src/protyle/gutter/button.ts, assigned via innerHTML in app/src/protyle/gutter/index.ts from content pasted as plain-text Markdown containing a Kramdown inline attribute list IAL. Because the...