CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it. Resource Vuln Info https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data Usage nuclei -t...

CVE-2025-55182-POC

CVE-2025-55182 / CVE-2025-66478 Vulnerability Reproduction Environment This is a minimal MVP for reproducing the React2Shell CVE-2025-55182 and Next.js RSC RCE CVE-2025-66478 vulnerabilities. ⚠️ Warning This project is intended for security research and educational purposes only. Do not use it in...

CVE-2018-11235

CVE-2018-11235 RCE vulnerability to exec "git clone --recurse-submodule" CVE-2018-11235...

CVE-2023-43364-Exploit-CVE

CVE-2023-43364-Exploit-CVE This is a python script to exploit Searchor 2.4.0 - the eval function was implemented insecurely and can be exploited for RCE. This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another...

CVE-2019-9580

CVE-2019-9580 - StackStorm exploiting CORS null origin to gain RCE Prior to 2.10.3/2.9.3, if the origin of the request was unknown, we would return null. null can result in a successful request from an unknown origin in some clients. Allowing the possibility of XSS style attacks against the...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Remote Code Execution Authenticated CVE-2025-5196 Wing FTP Server provides an administrative Lua scripting console accessible via its web interface. Authenticated administrators are able to execute arbitrary Lua code with insufficient sandboxing. Affected Version: Wing FTP...

CLEANSTART-2023-PQ45543 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-WS00387 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-LN29601 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-PU29121 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-AM62889 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

CLEANSTART-2023-BN75372 Exim libspf2 Integer Underflow Remote Code Execution Vulnerability

Security vulnerability affects the libspf2 package. Exim libspf2 Integer Underflow Remote Code Execution Vulnerability...

CVE-2022-24715

Icinga Web 2 - Authenticated Remote Code Execution 2.8.6, 2.9.6, 2.10 Remote command execution Reverse shell Usage usage: exploit.py -h -u URL -U USER -P PASSWORD -i IP -p PORT Welcome. options: -h, --help show this help message and exit -u URL, --url URL Insert URL http://ipvictima -U USER, --us...

cve-2020-0688

cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...

CLEANSTART-2023-VL53503 potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3

Security vulnerability affects the spamassassin package. A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CVE-2026-25053

CVE-2026-25053 Read: https://yadhu.in/2026/02/09/Breaking-Down-the-n8n-Git-Node-Vulnerability-CVE-2026-25053-Remote-Code-Execution/...

magento2-cosmic-sting-patch

Magento 2 Patch for CVE-2024-34102aka Cosmic Sting An alternative solutionas a Magento 2 extension to fix the XXE vulnerability CVE-2024-34102aka Cosmic Sting. If you cannot upgrade Magento or cannot apply the official patch, try this one. If you don't fix this vulnerability, the attacker can RCE...

[SECURITY] [DLA 4873-1] dovecot security update

Debian LTS Advisory DLA-4873-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 31, 2026 https://wiki.debian.org/LTS Package : dovecot Version : 1:2.3.19.1+dfsg1-2.1+deb12u7 CVE ID : CVE-2026-27852 CVE-2026-33263 CVE-2026-33604 CVE-2026-33605 CVE-2026-33606...