CVE-2021-22893

CVE-2021-22893 Pulse Connect Secure RCE Vulnerability CVE-2021-22893 Shodan : https://www.shodan.io/search?query=http.component%3A%22pulse+secure%22...

goahead-rce-exploit

GoAhead Web Server 2.5 use multi/handler msf6 exploitmulti/handler set payload generic/shellbindtcp msf6 exploitmulti/handler set LPORT=1337 msf6 exploitmulti/handler set RHOST=192.168.1.200 msf6 exploitmulti/handler run Started bind TCP handler against 192.168.1.200:1337 Luego, en otra terminal,...

drupalgeddon2-CVE-2018-7600

Drupal - Drupalgeddon2 CVE 2018-7600 $ python3 drupalgeddon.py -h + drupalgeddon2 CVE-2018-7600 exploit by Rafael Caria usage: drupalgeddon.py -h --url URL --command COMMAND --function FUNCTION --test --proxy PROXY ! This script exploits CVE-2018-7600 a Drupal property injection in the Forms API...

CVE-2024-9932-POC

CVE-2024-9932-POC Descripción: El plugin Wux Blog Editor para WordPress es vulnerable a la subida arbitraria de archivos debido a una validación insuficiente del tipo de archivo en la función wuxbtinsertImageNew. Las versiones hasta la 3.0.0 inclusive están afectadas. Esta vulnerabilidad permite ...

coreweave-demo-2026-05

Un Framework visual para crear aplicaciones de agentes autónomos y RAG De código abierto, construido en Python, totalmente personalizable, agnóstico en cuanto a modelos y bases de datos Documentación - Únete a nuestro Discord - Síguenos en X - Demostración Tu GIF 📝 Contenido 📝 Contenido 📦...

CVE-2023-54405

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...

GHSA-8MCX-5RQC-VHMF Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths

Affected files dulwich/index.py Methods: validatepathelementntfs, treetofspath dulwich/porcelain/init.py Method: checkedworktreepath Description / Summary A High-severity Path Traversal vulnerability exists in Dulwich's checkout logic when running on Windows. The functions responsible for...

Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths

Affected files dulwich/index.py Methods: validatepathelementntfs, treetofspath dulwich/porcelain/init.py Method: checkedworktreepath Description / Summary A High-severity Path Traversal vulnerability exists in Dulwich's checkout logic when running on Windows. The functions responsible for...

Spring4Shell-POC

Spring4Shell PoC Application This is a dockerized application that is vulnerable to the Spring4Shell vulnerability CVE-2022-22965. Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat...

Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinks

Summary Dulwich's stash.py:pop function is vulnerable to symlink directory traversal, allowing an attacker to write arbitrary files outside the repository worktree when a victim pops a stash in a malicious repository. Root Cause The pop function at dulwich/stash.py:236 uses os.path.existsparentdi...

GHSA-CM62-GVXX-VMXX Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinks

Summary Dulwich's stash.py:pop function is vulnerable to symlink directory traversal, allowing an attacker to write arbitrary files outside the repository worktree when a victim pops a stash in a malicious repository. Root Cause The pop function at dulwich/stash.py:236 uses os.path.existsparentdi...

CVE-2026-95369

An inappropriate implementation flaw was found in the XML component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513049042...

CVE-2023-54405 H3C CVM Unauthenticated File Upload via fileUpload/upload Token

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...

CVE-2023-54405

The H3C CVM (Cloud Virtualization Management) component of the H3C CAS cloud platform is vulnerable to an unauthenticated arbitrary file upload flaw in the /cas/fileUpload/upload endpoint. The root cause is the lack of restrictions on file types and the failure to sanitize the caller-supplied tok...

CVE-2023-54405 H3C CVM Unauthenticated File Upload via fileUpload/upload Token

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...

EUVD-2023-60704

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange For this lab, the goal was to practice triaging a well-known real-world vulnerability the way a security team might: reading the CVE details, understanding the CVSS score, and reasoning through how risky it actually is depending on the...

CVE-2025-2945

CVE-2025-2945 - Exploit de RCE autenticado en pgAdmin4 Autor: G0D150NE Versión: 2.0.0 CVE: CVE-2025-2945 Severidad: Crítica CVSS 9.9 📌 Descripción Exploit para la vulnerabilidad de ejecución remota de código RCE en pgAdmin4 que afecta a las versiones 8.10 a 9.1. La vulnerabilidad se encuentra en ...

Triage-CVE-2017-0144

Triage: CVE-2017-0144 EternalBlue / SMBv1 — associated with WannaCry spread For this lab, the goal was to triage another well-known real-world vulnerability, this time EternalBlue, the SMBv1 flaw that was famously exploited by the WannaCry ransomware outbreak. Step 1: Open the CVE in NVD I went t...

CVE-2025-5781

FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...