CVE-2019-12409

CVE-2019-12409: RCE Vulnerability Due to Bad Defalut Config in Apache Solr The 8.1.1 and 8.2.0 releases of Apache Solr contains insecure setting in the default solr.in.sh configuration file shipping with Solr. The setting that result in this vulnerability are: In "solr.in.sh":...

CVE-2019-17424

CVE-2019-17424 RCE Exploit For CVE-2019-17424 nipper-ng 0.11.10...

CVE-2026-56290

CVE-2026-56290 - Compagebuilderck Массовый эксплойт ⚠️ Отказ от ответственности Этот инструмент предназначен только для образовательных целей и авторизованного тестирования безопасности. Несанкционированный доступ к компьютерным системам незаконен Используйте этот инструмент только на системах,...

CVE-2026-13714

Realtyna WPL 5.3.0 - 認証なしRCEエクスプロイト 説明 このエクスプロイトは、Realtyna Organic IDX + WPL Real Estate プラグインのバージョン 5.3.0 未満に存在する重大な脆弱性を標的としています。このプラグインはハードコードされた認証情報を使用しており、認証なしのファイルアップロードを許可するため、リモートコード実行 RCE につながります。 脆弱性の詳細 CVE ID: CVE-2026-13714 影響を受けるバージョン: 5.3.0 タイプ: 認証なしの任意ファイルアップロードによるRCE 研究者: Thom...

CVE-2026-41089

🚨 CVE-2026-41089 - Критическая уязвимость Windows Netlogon, приводящая к удаленному выполнению кода RCE ⚠️ Критическая уязвимость Windows Netlogon, позволяющая неаутентифицированным злоумышленникам удаленно выполнять код на контроллерах домена. 📖 Обзор CVE-2026-41089 — это критическая уязвимость,...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE This PoC demonstrates how an attacker can chain Orange Tsai's CVE-2024-4577 with DNS rebinding to achieve remote code execution on internal network infrastructure directly through the victim’s web browser. By bypassing Same-Origin Policy SOP and exploiting vulnerable PHP-CGI...

KrayinCRM-RCE-Exploit-CVE-2026-38526

🔓 Krayin CRM v2.2.x — Эксплуатация аутентифицированного удаленного выполнения кода ⚠️ ТОЛЬКО ДЛЯ АВТОРИЗОВАННОГО ТЕСТИРОВАНИЯ БЕЗОПАСНОСТИ — несанкционированное использование незаконно и неэтично. 📋 Обзор Этот эксплойт демонстрирует критическую уязвимость аутентифицированного удаленного выполнения...

CVE-2020-11984

Quick start root@kitploit: docker build --no-cache -t cve-2020-11984 . docker run --rm -it -p 8080:80 --name cve-2020-11984 cve-2020-11984 pipenv run python3 exploit.py -u localhost:8080/ -c "echo 111/tmp/abc" Reference root@kitploit: https://github.com/RubenBar/MLW-upcrans/...

CVE-2024-28397

CVE-2024-28397 js2py Sandbox Escape Exploit - CodePartTwo - HTB A Python exploit code for CVE-2024-28397 , a critical vulnerability in js2py = 0.74 that allows sandbox escape and remote code execution. 🚨 Vulnerability Details CVE ID : CVE-2024-28397 Affected Software : js2py = 0.74 Severity :...

CVE-2025-69219

CVE-2025-69219 — Apache Airflow Providers HTTP RCE via Unsafe Pickle Deserialization Severity: High CVSS 3.1: 8.8 Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE: CWE-913 — Improper Control of Dynamically-Managed Code Resources Affected: apache-airflow-providers-http = 5.1.0, Fixed in:...

CVE-2021-21974

CVE-2021-21974 VMware ESXi OpenSLP Heap Overflow Remote Code Execution PoC Author: Aiyakami Overview CVE-2021-21974 is a heap overflow vulnerability in the OpenSLP service in VMware ESXi. An unauthenticated attacker can send specially crafted packets over the network to the target ESXi host's SLP...

Mitigate-CVE-2023-46747

Ansible Playbook to Mitigate CVE-2023-46747 K000137353: BIG-IP Configuration utility unauthenticated remote code execution vulnerability CVE-2023-46747 Here is the link https://my.f5.com/manage/s/article/K000137353 How to use it 1. Git clone my repo...

gogs-CVE-2025-8110

Gogs CVE-2025-8110 PoC This repository contains a Proof of Concept PoC for CVE-2025-8110, a Remote Code Execution RCE vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the sshCommand configuration. Usage To run t...

CVE-2026-20253

Splunk Enterprise — CVE-2026-20253 Training Lab Splunk Enterprise 10.2.3 · PostgreSQL recovery sidecar · CWE-306 Missing Authentication for Critical Function An authorized, self-contained reproduction that models the real advisory for defensive education. It does not ship Splunk's proprietary cod...

389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet()

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-56291

CVE-2026-56291 — Balbooa Forms Joomla Mass RCE Exploit Pre-Auth form.uploadAttachmentFile → No CSRF → PHP Upload Overview CVE-2026-56291 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Balbooa Forms combaforms Joomla extension 2.4.1. The form.uploadAttachmentFile...

CVE-2025-22953

CVE-2025-22953 – Epicor HCM Unauthenticated Blind SQL Injection Update – Patch Released by Epicor Epicor has officially released a patch addressing this vulnerability. All affected users are strongly advised to apply the update immediately. 🔗 Epicor Security Patch Announcement Summary An...

CVE-2021-32099

CVE-2021-32099 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2021-32099 vulnerability, affecting Pandora FMS 742. The exploit shows how an unauthenticated attacker can leverage a SQL injection vulnerability to escalate an unprivileged session to an administrator-level...

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ 安全バリデータ Apache ActiveMQ CVE-2023-46604 向けの単一ファイル・非破壊型バリデータです。独自のHTTPコールバックサーバーを起動し、ターゲット固有のSpring XMLをメモリ上で生成し、細工されたOpenWireパケットを送信し、一意のトークンでコールバックを関連付け、CSV/JSONの証跡を書き出します。...

CVE-2026-48907

CVE-2026-48907 — Joomla JCE Unauthenticated RCE Lab PSsec Educational security research lab for CVE-2026-48907. Overview CVE-2026-48907 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability in JCE Joomla Content Editor , the most widely installed editor extension for Joomla,...