CVE-2025-12737

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

CVE-2026-6071

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...

EUVD-2026-70466

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...

CVE-2026-6071

Rockwell Automation Arena® is affected by a remote code execution vulnerability caused by an out-of-bounds write when parsing DOE files . An attacker can craft a malicious DOE file that, when opened by a legitimate user, writes past the end of an allocated object and executes code within the cont...

CVE-2026-85168

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

CVE-2026-85169

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-76174

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...

CVE-2025-12737

CVE-2025-12737 affects WSO2 products via the Carbon Console . Administrative operations within the console do not adequately validate specific user-supplied input, allowing a threat actor with administrative privileges to inject and execute arbitrary code remotely , leading to complete compromise...

EUVD-2025-210842

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Demonstration Project This is a demonstration project for learning and researching the Log4j2 remote code execution vulnerability Log4Shell. ⚠️ Safety Warning This project is intended for security research and educational purposes only. Do not...

CVE-2024-55182

CVE-2025-55182 React2Shell Vulnerablity 1. Explanation about the Vulnerablity: CVE-2025-55182 “React2Shell” is a critical Remote Code Execution RCE vulnerability inside React Server Components RSC — specifically in the React Flight protocol deserialization logic. Affects: React’s server-side...

CVE-2021-3007-docker-poc

CVE-2021-3007 — Laminas/Zend HTTP Deserialization RCE This repository contains a fully reproducible Proof-of-Concept and Nuclei exploit template for CVE-2021-3007, a critical PHP deserialization vulnerability in Zend\Http\Response\Stream laminas-http Nuclei exploit template ├── docker-compose.yml...

Rust_CVE-2025-55182

CVE-2025-55182 Exploit Tool Rust Version Project Overview This project is a security research tool developed in Rust, targeting the Remote Code Execution RCE vulnerability present in [email protected]. The vulnerability allows an attacker to execute arbitrary code on a target server without...

CVE-2021-21220

Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...

USN-8722-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an SSH server could use this issue to cause libssh2 to crash or possibly execute arbitrary code. CVE-2026-66032 It was discovered that libssh2 incorrectly handled AES-GCM cipher...

Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

Spring4Shell Threat Sandbox CVE-2022-22965 Overview This walkthrough documents the completion of the Sandbox Challenge focused on CVE-2022-22965, commonly known as Spring4Shell — a critical CVSS 9.8/10 remote code execution vulnerability affecting specific versions of the Spring Java framework. T...

Vulnerability-Assessment-Exploitation-Lab

漏洞评估与利用实验环境 Metasploitable 2 渗透测试实验室 执行摘要 本项目记录了一次针对 Metasploitable 2 Linux 环境的成功、全生命周期渗透测试。评估过程遵循 渗透测试执行标准（PTES） ，涵盖初始侦察、漏洞利用以及后渗透凭据恢复。主要目标是展示未修补遗留服务及弱密码策略所导致的安全风险。 技术实验架构 执行本实验需要专门的虚拟化策略，以桥接 Apple Silicon M5 芯片 上的架构差异： 攻击机： Kali Linux（ARM 版），通过 UTM 虚拟化。 目标机： Metasploitable 2（x86 架构），通过 UTM/QEMU...

htb-labs-nexus

🏴‍☠️ HTB Labs - Nexus English 🇺🇸 | Español 🇪🇸 English | Español 📋 概述 Nexus 是 Hack The Box 上一台简单难度的 Linux 机器 ，演示了一条多阶段攻击链，涉及虚拟主机枚举、暴露的凭据、易受攻击的 Web 应用功能、远程代码执行、凭据重用和本地权限提升。 攻击链 root@kitploit: 侦察 │ ▼ 虚拟主机枚举 │ ├── git.nexus.htb └── billing.nexus.htb │ ▼ Gitea 提交历史 │ ▼ 暴露的凭据 │ ▼ Krayin CRM 登录 │ ▼...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

Sandbox Challenge: Log4Shell CVE-2021-44228 Overview This walkthrough documents the steps taken to complete the CISA Threat Sandbox Challenge for CVE-2021-44228, commonly known as Log4Shell. The challenge involved completing two objectives — one red team offensive and one blue team defensive —...