CVE-2018-2893

CVE-2018-2893 Weblogic CVE-2018-2893 Enjoy 测试环境-Docker The Docker In Here! https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.md Ps: 由于外网有RMI远程服务器，很方便弹到shell; 如果在内网，你需要指定自己的RMI服务器，不然无法获取到反弹Shell !!! 0x01 generate-payload 0x02 send-payload Payload:...

c0ntextomy

c0ntextomy an informal fallacy and a type of false attribution in which a passage is removed from its surrounding matter in such a way as to distort its intended meaning Wikipedia - Contextomy A Proof of Concept demonstrating the vulnerability with a debug session hijack, remote code execution, a...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

CVE-2018-6574-go-get-RCE

This repository does not have a README...

PrintNightmare

PrintNightmare Here is a project that will help to fight against Windows security breach PrintNightmare! CVE-2021-34527 You have to know that a patch has been released by Microsoft against this breach but is not fully functional and fight only RCE Remote code execution while LPE Local privilege...

gollina

$ gollina -h gollina Follina MS-MSDT 0-day MS Office RCE PoC in Go -- @dwisiswant0 Usage: gollina -c COMMAND OPTIONS... Options: -h, --host Listener host default: 0.0.0.0 -p, --port Listener port default: 8090 -n, --name Word file name w/o extension, default: gollina -c, --command Arbitrary comma...

SUSE CVE-2026-119260

Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119261

Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119262

Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119263

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119264

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119265

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119266

Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119267

Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119268

Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119269

Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119270

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-119271

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2023-24489-poc

CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It needs a list of target.txt full of the targets you want to test in this format: https://example1.com https://example2.com https://example3.com The file must be within the same dir where the bash script is executed. Please use with caution !...

CVE-2026-39987-Marimo-Preauth-RCE

CVE-2026-39987 – Marimo Pre-authentication RCE Research Security research and experimental validation of CVE-2026-39987, a missing authentication vulnerability affecting Marimo's terminal WebSocket endpoint. This project documents the vulnerability's root cause, local reproduction results, offici...