CVE-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify This repository contains documentation and analysis for CVE-2026-34038 , a critical command injection vulnerability in Coolify. Summary An authenticated remote command injection vulnerability CWE-78 in Coolify allows users with...

laravel-exploits

laravel-exploits Exploit for CVE-2021-3129 Details: https://www.ambionics.io/blog/laravel-debug-rce Usage $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar Log file:...

CVE-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

CVE-2026-25253-research

CVE-2026-25253 Proof of Concept One-click RCE on OpenClaw via Cross-Site WebSocket Hijacking. DISCLAIMER: This code is provided for authorized security research and educational purposes only. Use of this code against systems without explicit written permission is illegal and unethical. The author...

WSO2-2021-1258

WSO2-2021-1258: Zip Slip vulnerability in WSO2 ESB A ZIP file based directory traversal Zip Slip vulnerability was identified in the WSO2 Management Console. Remote code execution may be obtained by writing/overwriting specific files. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2016-2098

CVE-2016-2098 Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. Explanation: This issue comes from the usage of the render method on user-supplied data. The method render is usually used to render a page from a template, but render method also allows...

CVE-2025-29306-PoC-FoxCMS-RCE

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit A Python exploit for CVE-2025-29306, a remote code execution vulnerability in FoxCMS. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability Multi-threaded for fast scanni...

apache-mina-deserialization-security-assessment

CVE-2024-52046 - Apache MINA Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Apache MINA deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|---...

log4shell

Log4Shell This project is a demonstration of how the log4shell security vulnerability works. This vulnerability is described in CVE-2021-44228. The project is intended for educational purposes only. It should only be used on your own system and solely for experimental purposes. Any execution is...

CVE-2022-28171-POC

CVE-2022-28171-POC I originally published this on ExploitDB, which you can find at https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...

CVE-2022-22954

CVE-2022-22954 Attention Please use this at your own risk. This repo is meant only for educational purposes and we are strictly against all illegal intentions and we would not be responsible of any illegal activities associated with this repo. Be ethical! Example python3 CVE-2022-22954.py -t...

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — SiYuan MCP Unauthenticated Administrator Takeover Proof of Concept for CVE-2026-66012 CVSS 10.0 Critical, a missing-authorization vulnerability in SiYuan's MCP Model Context Protocol endpoint that allows an unauthenticated attacker to achieve administrator takeover and remote cod...

CVE-2024-34716

CVE-2024-34716PoC More technical details can be found on https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installation pip install -r requirements.txt Usage Usage: python exploit.py --url --email --local-ip --admin-path...

CVE-2026-25253

CVE-2026-25253: One-Click RCE in OpenClaw via Auth Token Theft Affected Software: OpenClaw clawbot LEGAL DISCLAIMER: This code and writeup are provided for authorized security research and educational purposes only. Use of this exploit against systems without explicit written permission is illega...

CVE-2022-29078

CVE-2022-29078 Simple PoC for CVE-2022-29078 vuln ejs 3.1.6 Usage git clone https://github.com/chuckdu21/CVE-2022-29078.git cd CVE-2022-29078 python3 CVE-2022-29078.py A prompt will appear to execute commands $ id uid=0root gid=0root groupes=0root...

CVE-2021-44228

CVE-2021-44228 Log4j2 Component Command Execution RCE Code By: Junsheng @Orange Cyber Security Lab Orange Cyber Security Lab https://0range.team/ 0x00 Risk Overview This tool is for authorized security testing only. Unauthorized attacks on illegal sites are prohibited. Read online 《Cybersecurity...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...

D-Link

CVE-2024-10914 D-Link Remote Code Execution RCE D-Link NAS- Command Injection via Name Parameter CVE-2024-10914:- A vulnerability was found in D-Link DNS-320, DNS- 320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiusera...

Laravel-8.4.2-rce-CVE-2021-3129

Laravel-8.4.2-rce-CVE-2021-3129 exploit.py tested use python3,and only working with phpggc . first docker-compose up port on 8888 at 127.0.0.1 generate key first...

Deep-Reaver

Deep Reaver Deep Reaver is a powerful, AI-enhanced vulnerability assessment and exploitation toolkit built in Python. Inspired by tools like Nmap and Nessus, Deep Reaver is designed for deep, modular scanning of web applications and services. Features AI-assisted analysis via aiassistant.py Modul...