IngressNightmare-PoC

Exploit for Ingress NGINX - IngressNightmare This project provides an exploit targeting critical unauthenticated Remote Code Execution RCE vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively referred to as IngressNightmare. Research by Wiz In the original research, the Wi...

CVE-2026-101990

A Stack-based Buffer Overflow vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . A remote configured BGP peer can trigger an rpd crash or, on Junos OS, achieve remote code-execution by sending a flow-spec update that is selected for re-ad...

EUVD-2026-101480

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement...

CVE-2026-101990 Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement...

CVE-2026-101997

Juniper Networks Junos OS on SRX Series is vulnerable to an SQL Injection vulnerability within the ipfd component. An unauthenticated network-based attacker can exploit this flaw to achieve Remote Code Execution with root privileges when a Security Intelligence feed connection is configured witho...

CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2026-102062

A Use of Externally-Controlled Format String vulnerability exists in the ipfd daemon of Juniper Networks Junos OS on SRX Series devices. This flaw allows an unauthenticated network-based attacker to achieve remote code execution with root privileges . The vulnerability is triggered when the syste...

CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used

An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server...

CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used

An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server...

EUVD-2026-101458

An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...

CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution

An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...

CVE-2026-102084

A buffer overflow vulnerability exists in the VPN daemon of Juniper Networks Junos OS on SRX Series devices. This flaw stems from an Improper Validation of Syntactic Correctness of Input when the device is configured for AutoDiscovery VPN (ADVPN) . An authenticated, network-based attacker who can...

CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale Authentication Bypass & RCE Reproducible lab environment for CVE-2024-3408, an authentication bypass and remote code execution vulnerability in D-Tale. Vulnerability D-Tale versions up to 3.15.1 are vulnerable due to: 1. Hardcoded SECRETKEY "Dtale" for Flask session signing...

CVE-2024-53677

CVE-2024-53677 Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution...

NextJS-app-CVE-2025-55182

Next.js CVE-2025-55182 Proof of Concept This is a proof-of-concept Next.js application vulnerable to CVE-2025-55182 also known as "React2Shell", a critical Remote Code Execution RCE vulnerability in React Server Components. ⚠️ WARNING This application is intentionally vulnerable and should ONLY be...

CVE-2019-7069-POC

Kibana ⚠️ Disclaimer: This script is for educational and authorized penetration testing only. Do not use it on systems you do not own or have explicit permission to test. The author and contributors are not responsible for any misuse or damage caused by this tool. 🎯 What is this? This is a Python ...

EUVD-2026-101434

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-103994 Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-103994

A Heap-based Buffer Overflow vulnerability exists in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS . A malicious or compromised SDN-controller can send a crafted OVSDB message to trigger this flaw, potentially causing a complete outage of the OVSDB control plane or leading to remote...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...