CVE-2025-51495

I would like to report a security vulnerability identified in the latest release of Mongoose v7.17. The issue resides in the WebSocket module, specifically within the mgwscb function responsible for handling incoming WebSocket frames. The function is vulnerable to an integer overflow, which may...

CVE-2025-32433-Exploit-edited

CVE-2025-32433 Exploit Windows Compatible Erlang/OTP SSH Unauthenticated Remote Code Execution Description This repository contains an exploit for CVE-2025-32433, a critical unauthenticated remote code execution vulnerability in Erlang/OTP SSH server. Key Features: ✅ Pre-authentication RCE exploi...

PaloAltoRceDetectionAndExploit

PaloAlto Rce Detection And Exploit Detecion for the vulnerability CVE-2017-15944 Till now no vulnerability scanner detecting the vulnerability Detection and exploit...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint -un -p -ru Disclaimer This script is for educational and rese...

CVE-2026-22807_Range

🛡️ CVE-2026-22807 Simulation: AI Supply Chain RCE Target Range ⚠️ Disclaimer This project is intended solely for security research and educational purposes , aiming to demonstrate the supply chain attack principle Remote Code Execution during AI model loading. Do not use the generated malicious...

CVE-2021-26700

CVE-2021-26700 Note: this manual is valid for DSNS lab's members only. Intruduction This is a remote code execution RCE vulnerability that resided in an extension of Visual Studio Code VS Code called npm, which was developed by Microsoft and was aimed to support running the npm scripts defined in...

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

CVE-2026-3288-lab

CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Controller Configuration Injection ⚠️ WARNING : This lab contains intentionally vulnerable configurations for AUTHORIZED SECURITY TRAINING ONLY Vulnerability Overview CVE-2026-3288 CVSS 8.8 HIGH - Configuration injection in NGINX Ingress Controller...

CVE-2020-14882

CVE-2020-14882 CVE-2020–14882 - research by Jang Code by @s1kr10s Poc: POST Review / Video: https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf https://www.youtube.com/watch?v=JFVDOIL0YtA&feature=youtu.be...

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability LEGAL DISCLAIMER AND TERMS OF USE The Proof of Concept PoC code and technical information provided in this document are intended solely for educational purposes, academic research, and authorized security testing...

CVE-2017-5638

CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...

CVE-2026-23744

CVE-2026-23744 – Proof of Concept The Python script in this PoC sends a simple HTTP request to the target host running MCPJam inspector version replace with your listening port Then, open another shell, and run the PoC: cd CVE-2026-23744 python3 exploit.py References REC in MCPJam inspector due t...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

CVE-2026-118235

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handleupload function. This is due to missing server-side file key allowlist and pre-sanitization...

CVE-2026-103882

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the postdeleteassessmentfilebyid function in all versions up to, and including, 1.1.9. This makes it possible for...

Sovereign-Echo-33017

Exploit Title: Langflow 1.8.1 - Unauthenticated Remote Code Execution RCE Date: 2026-03-21 Exploit Author: Americo N. F. Simoes SimoesCTT Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: = 1.8.1 Tested on: Linux/Fedora 40 CVE: CVE-2026-330...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Example:...

CVE-2020-16898--EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html POC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as administrator Powershell.exe -ExecutionPolicy UnRestricted -File...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...