dockerevil

dockerevil एक सरल रिपॉजिटरी जो Docker तकनीक में मेरी सुरक्षा खामियों को संग्रहीत करती है 2016 - 2017 Docker API विशेषाधिकार वृद्धिLPE/RPE ऑफ़लाइन सर्वर/न्यूनतम इमेज से विशेषाधिकार वृद्धि/TAR Dockerfile से बिल्ड Docker SUDO विशेषाधिकार वृद्धि PoC Nmap स्क्रिप्ट 2019 CodeStudent1995 आधारित एक्सप्लॉ...

Magneto-PolyShell

Magento 2 RCE Exploit - Unauthentifizierter Datei-Upload zu RCE ⚠️ Dieses Tool dient ausschließlich zu Bildungs- und autorisierten Sicherheitstests. Unbefugte Nutzung gegen Systeme, die Ihnen nicht gehören, ist illegal. Dieses Exploit zielt auf eine kritische Schwachstelle für nicht...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution Exploit di iniezione di codice PHP per Dolibarr ERP/CRM v17.0.0 che permette di ottenere una shell inversa come utente www-data tramite il modulo Website/CMS. ⚠️ Solo per uso educativo e audit autorizzati. 📑 Indice Che cos'è...

ghostlock-vagrant-box

Testumgebung für vollständige Angriffskette: Nginx RCE → GhostLock LPE Übersicht Dieses Repository stellt eine Vagrant-Umgebung bereit, die eine komplette zweistufige Angriffskette demonstriert. Die Testumgebung richtet automatisch eine isolierte Ubuntu 22.04 LTS -VM ein, die absichtlich so...

CVE-2022-26134

Confluence में Pre-Auth Remote Code Execution OGNL Injection के माध्यम से CVE-2022-26134 Ruby में Confluence एक वेब-आधारित कॉर्पोरेट विकी है जिसे ऑस्ट्रेलियाई सॉफ्टवेयर कंपनी Atlassian द्वारा विकसित किया गया है। 2 जून, 2022 को Atlassian ने अपने Confluence Server और Data Center अनुप्रयोगों के लिए ...

SGLang-0.5.9-RCE

SGLang SSTI से RCE PoC — अनसैंडबॉक्स्ड Jinja2 चैट टेम्पलेट रेंडरिंग CVE-2026-5760 SGLang के reranking एंडपॉइंट में Server-Side Template Injection SSTI के माध्यम से Remote Code Execution। एक दुर्भावनापूर्ण GGUF मॉडल फ़ाइल जिसमें क्राफ्टेड tokenizer.chattemplate होता है, SGLang में लोड होने और...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

litellm-command-injection-security-assessment

CVE-2026-42271 - Injeção de Comandos RCE no LiteLLM AI Gateway MCP Relatório de Cibersegurança em Estilo Consultivo Relatório profissional de avaliação de vulnerabilidades sobre o risco de injeção de comandos no LiteLLM, incluindo resumo executivo, impacto técnico, remediação e estratégia de...

document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDF RCE über klickbare Links Cybersicherheitsbericht im Beraterstil Professioneller Schwachstellenbewertungsbericht zum Risiko der Linkbehandlung in Dokumentbetrachtern, einschließlich Auswirkungsanalyse, Behebung und Strategie zur Risikominderung. 📍...

Codify-TJNULL-OSCP-

Hack The Box — Codify Writeup Vollständiger Penetrationstest-Walkthrough und Writeup für die Maschine Codify auf Hack The Box. 📌 Maschineninfo Feld| Wert ---|--- Name| Codify Betriebssystem| Linux Schwierigkeitsgrad| Einfach Kernkonzepte| vm2 RCE CVE-2023-30547, SQLite-DB-Enumeration,...

mi-laboratorio-log4shell

🚀 Automatisiertes Log4Shell- CVE-2021-44228 Plug-and-Play-Labor Ein automatisiertes Sicherheitsforschungslabor mit einem einzigen Befehl, das dazu dient, die Log4Shell- CVE-2021-44228 Remote-Code-Execution-Schwachstelle RCE zu demonstrieren und zu auditieren. Dieses Projekt bündelt alle...

cve-2025-66478_rce_vulnerable

Blog Moderno com shadcn/ui Um blog moderno e elegante construído com Next.js 16, React 19, shadcn/ui e Tailwind CSS. IMPORTANTE: Projeto de Next JS VULNERÁVEL criado apenas para fins educativos, de testes e exploração, NÃO SE RECOMENDA INSTALAÇÃO EM PRODUÇÃO, APENAS PARA ÂMBITO LOCAL OU AMBIENTE...

BIT-VALKEY-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

BIT-VALKEY-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

Microsoft SharePoint Server - Remote Code Execution (ToolShell)

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. This vulnerability is part of the ToolShell exploit chain and when combined with CVE-2025-53771 authentication bypass, enables unauthenticated remote code...

Open Web Analytics 1.7.3 - Remote Code Execution

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...

ServiceNow UI Macros - Template Injection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 RCE non autenticata iniezione di variabili d'ambiente MCP stdio Esecuzione remota di codice non autenticata in Langflow OSS fino alla 1.10.1. La blocklist delle variabili d'ambiente che protegge la configurazione dei server MCP stdio DANGEROUSENVVARS omette...