CVE-2026-52813-Gogs-RCE

CVE-2026-52813 — Gogs Path Traversal Leading to Git Hooks Remote Code Execution Defensive Analysis Security research / Blue team writeup. This repository does not contain weaponized PoC. Researchers needing reproduction should use the public PoC referenced in the official advisory. Item| Content...

CVE-2024-5084

Wordpress Hash Form – Drag & Drop Form Builder = 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2024-5084 The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction'...

CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-Template Nuclei template and information about the POC for CVE-2024-25600 Description 📝 The Bricks theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to execute code on t...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...

cve-2021-44228-log4shell_rce_reproduction

CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Execution CVSS 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | CWE-917: Improper Neutralization for Expression Language Injection Overview Log4Shell CVE-2021-44228 is arguably the most severe vulnerability of the 2020s, affecting...

-CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

CVE-2021-41773

CVE-2021-41773 — Apache Path Traversal & RCE Exploitation Writeup of the TryHackMe "Modern Web Stacks" room, focused on exploiting CVE-2021-41773 , a path traversal vulnerability in Apache HTTP Server 2.4.49 that leads to remote code execution when modcgi is enabled. Summary Item| Detail ---|---...

cve-2011-2553

Notice: This repository contains educational material for testing in a controlled laboratory. Do not use the files or techniques described here against systems that are not your own or that do not have explicit authorization. The goal is learning and strengthening security. CVE-2011-2553 FTP...

CVE-2024-47176

CVE-2024-47176 — CUPS RCE Exploit Lab CyberSecurity & Virtualisation 2025-2026 Isolated lab environment to demonstrate CVE-2024-47176 CUPS Remote Code Execution via cups-browsed. Setup Required VDIs Ubuntu 22.04 NOT 24.04! — https://www.osboxes.org/ubuntu/ → VirtualBox VDI Kali Linux 2026.1 —...

vBulletin_Routestring-RCE

CVE-2019-16759vBulletinRoutestring-RCE-PoC A vulnerability has been discovered in vBulletin which could allow for remote code execution when a malicious POST request is sent to the vulnerable application. The vulnerability is due to an input validation error while parsing a HTTP request in the...

CVE-2025-53772

CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-537...

-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE

SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE This is an investigation conducted on the Let's Defend platform, based on a recent SharePoint CVE. Let's take a look. 1. Examine the rule name. Rule names are usually created specifically for the attack to be detected. By examining...

log4j2-rce-recap

Little recap of the log4j2 remote code execution CVE-2021-44228 Requirements maven = 3 java = 8 no running ldap on 127.0.0.1:1389 Usage Build with maven. mvn test The surefire plugin will be executed two times: ExploitabilityTest proofs the expolitability of the bug. MitigationTest will be execut...

lab-annie

🔐 Lab Annie — TryHackMe CTF Write-Up 📋 Project Overview This TryHackMe lab, titled "Annie" , is a hands-on cybersecurity CTF Capture The Flag challenge that focuses on remote-access vulnerabilities and privilege escalation. Detail| Info ---|--- 🎯 Platform| TryHackMe 🏫 Program| Cyber Sec Cyber Sec...

CVE-2025-22777

CVE-2025-22777 GiveWP – Donation Plugin and Fundraising Platform = 3.19.3 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.3 via...

CVE-2017-0037

CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability This document is about CVE-2017-0037- Microsoft Browser Memory Corruption Vulnerability. It will first introduce what a Remote Code Execution RCE is and then go over through some technical specifics. What is Remote Code Execution? A...

CVE-2024-11392

CVE-2024-11392 Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious configuratio...

Node2Shell

Node2Shell 💀 NODE2SHELL A Python-based Node.js reve...

CVE-2023-51126

CVE-2023-51126 FLIR AX8 up to 1.46.16 is vulnerable to command injection via /usr/www/res.php. VulnerabilityType Other command injection Vendor of Product FLIR Affected Component in /usr/www/res.php. The parameter value can inject the command and exec it. Attack Type Remote Impact Code execution...

CVE-2026-24061_POC

CVE-2026-24061 GNU Telnetd RCE Script Parameters Parameter| Description| Default Value| Required?| Example ---|---|---|---|--- -ip| Specifies the target IP address for the connection.| -| Yes| -ip 192.168.1.10 -u| Specifies the username for the Telnet connection.| root| No| -u admin -p| Specifies...