CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - Ejecución remota de código no autenticada limitada Descripción: Los plugins Time Clock y Time Clock Pro para WordPress son vulnerables a la ejecución remota de código en versiones hasta, e incluyendo, 1.2.2 para Time Clock y 1.1.4 para...

dRMM-CVE-2020-1350-response

Overview Microsoft announced CVE-2020-1350 on July 14 2020. This vulnerability in Windows DNS server goes back to Server 2003 and is broadly thought to be wormable. This script follows the intructions from KB456509...

CVE-2019-15858

CVE-2019-15858 Unauthenticated Remote Code Execution at Woody Ad Snippets PoC An unauthenticated options import vulnerability combined with a stored XSS vulnerability can lead to remote code execution in the WordPress Woody Ad Snippets 90,000+ active installations. Woody Ad Snippets is a plugin...

Confluence_CVE-2021-26084

ConfluenceCVE-2021-26084 Remote Code Execution on Confluence Servers : CVE-2021-26084 PoC Confluence Possible exploit endpoints https:///login https:///pages/templates2/viewpagetemplate.action https:///template/custom/content-editor https:///templates/editor-preload-container...

React2ShellPoC

Comprendiendo CVE-2025-55182 React2Shell: Una inmersión profunda en la Ejecución Remota de Código a través de React Server Components Resumen CVE-2025-55182, también conocido como React2Shell , es una vulnerabilidad crítica de ejecución remota de código RCE que afecta a React Server Components...

CVE-2025-55182-Dockerized

CVE-2025-55182 - Prueba de Concepto Dockerizada Este repositorio contiene una prueba de concepto dockerizada para CVE-2025-55182, una vulnerabilidad crítica de ejecución remota de código en React Server Components RSC que afecta a aplicaciones Next.js que usan Server Actions. Créditos La prueba d...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Explotación de Vulnerabilidad de Ejecución Remota de Código CVE-2024-7954 Proyecto de Pruebas de Vulnerabilidad de Software Presentado por: Shivansh Kuntal Resumen Este proyecto demuestra la explotación de CVE-2024-7954 , una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta a...

cve-2025-57819

🛡️ FreePBX Hunter - CVE-2025-57819 🛡️ Un potente conjunto de herramientas Nuclei para detectar y validar la crítica vulnerabilidad de omisión de autenticación en FreePBX. 📖 Tabla de Contenidos Haga clic para expandir Acerca de Este Proyecto Características Clave Desglose de la Vulnerabilidad...

ownCloud_RCE_CVE-2013-0303

Este repositorio no tiene un README...

CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape

CVE-2026-1337 – AI Coding Assistant Prompt Injection to RCE 📖 Overview A prompt injection vulnerability in an AI-powered code review bot allows an attacker to inject arbitrary shell commands by manipulating the bot’s “fix” suggestion. The sanitizer uses a simple blacklist that is bypassed using...

CVE-2018-16763

Exploit CVE 2018-16763 Introducción PreAuth-RCE en FUEL CMS 1.4.1 Demo Referencias: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

CVE-2026-17196 Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function. This is due to missing file type validation in the uploadfiles function, which reads and applies an...

CVE-2026-17196

The Super Forms WordPress plugin (versions up to and including 6.3.316 ) is vulnerable to Unrestricted File Type Upload via the upload_files function. The root cause is a lack of file type validation, where the application reads an attacker-controlled extensions string from the _super_elements po...

EUVD-2026-94737

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function. This is due to missing file type validation in the uploadfiles function, which reads and applies an...

CVE-2023-52251-POC

CVE-2023-52251-POC There is a Remote Code Execution vulnerability provectus/kafka-ui. There is no patch as of writing this, but the vendor is notified by us and the team over at VINCE without any response. Report was sent Sep 27, 2023 to provectus both via email and github security. Remediation W...

CVE-2020-14645

CVE-2020-14645 Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData Project depends on https://github.com/5up3rc/weblogiccmd Demo Require 1. JDK Version JDK6u211/7u201/8u191 2. Weblogic Version 12.2.1.4.0 Do not use illegally!!!!!!!! Reference 1...

PrintNightmare

PrintNightmare ¡Este es un proyecto que ayudará a combatir la brecha de seguridad de Windows PrintNightmare! CVE-2021-34527 Debes saber que Microsoft ha lanzado un parche contra esta brecha, pero no es completamente funcional y solo combate RCE Ejecución remota de código, mientras que LPE Elevaci...

CVE-2026-1555

CVE-2026-1555 WebStack = 1.2024 - Unauthenticated Arbitrary File Upload 👤 By: Nxploited 🔗 Nxploited ZeroDay Hub — t.me/KNxploited 💀 CVE-2026-1555 — WebStack WordPress Arbitrary File Upload Unauthenticated Remote Code Execution viaimgupload AJAX handler 📌 Vulnerability Overview Field| Detail ---|-...

CVE-2024-39205-Pyload-RCE

CVE-2024-39205-Pyload-RCE Pyload RCE con escape de sandbox js2py Resumen Cualquier pyload-ng ejecutándose bajo python3.11 o inferior es vulnerable a RCE. Un atacante puede enviar una solicitud que contenga cualquier comando de shell y el servidor víctima lo ejecutará inmediatamente. Solución...