1188909 matches found
CVE-2025-30374
CVE-2025-30374 Class Pollution Vulnerability in Taipy Leading to RCE, XSS, DoS, and Credential Leakage Summary A class pollution vulnerability has been identified in Taipy v4.0.3 the latest version at the time of discovery. This vulnerability allows unauthorized attackers to overwrite the Taipy...
threat-intel-cve-2024-3094
Threat Intelligence Report: CVE-2024-3094 β XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...
CVE-2026-112332
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue in zstd-jni (CVE-2026-90852)
Summary Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue, due to a flaw in the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. in zstd-jni. Zstd-jni is used in our Speech microservices. This...
nginx-cve-2026-42945-poc
CVE-2026-42945 β NGINX Rewrite Module Heap Buffer Overflow β RCE RCE confirmed successful β via heap overflow + GDB process injection, execute arbitrary commands in NGINX / OpenResty worker processes. Quick Start One-click build NGINX image + execute RCE test ./run.sh nginx One-click build...
CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit
CVE-2026-56158 β .NET Framework Remote Code Execution RCE PoC Exploit Critical CVSS 9.8 β Deserialization of Untrusted Data CWE-502 in Microsoft .NET Framework & .NET Runtime Patched: July 14, 2026 | Attributed to: Positive Technologies PT-2026-60174 Table of Contents Overview Vulnerability Detai...
MaccaroniC2
MaccaroniC2 - Empowering Command & Control using AsyncSSH MaccaroniC2 is a proof-of-concept Command and Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server implementation of the SSHv2 protocol and use PyNgrok wrapper for ngrok...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...
PHP_8.1.x_Exploit
π PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a singleβfile, zeroβconfiguration security assessment tool that automatically discovers vulnerable PHP endpoints and...
PSForgot2kEyXCHANGE
PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...
CVE-2026-34197
π¨ CVE-2026-34197 β Critical Jolokia RCE in Apache ActiveMQ Authenticated RCE via Jolokia MBeans β Remote Spring XML β JVM Code Execution π Overview CVE-2026-34197 is a high-severity authenticated remote code execution vulnerability affecting Apache ActiveMQ Classic. The issue exists in the Joloki...
CVE-2025-55182-Exploit-PoC-Scanner
CVE-2025-55182 - React Server Components RCE Exploit v2.0 A comprehensive security research tool for testing CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React Server Components RSC and Next.js Server Actions. Vulnerability Overview Property| Value ---|--- CVE IDs| CVE-2025-55182,...
CVE-2026-22812
π CVE-2026-22812 - OpenCode Unauthenticated HTTP Server β Remote Code Execution RCE Security advisory, technical analysis, detection guidance, and mitigation notes for CVE-2026-22812 π Overview CVE-2026-22812 is a high-severity Remote Code Execution RCE vulnerability affecting OpenCode versions...
mapped-dumper
Manual Mapped Module Dumper A program written in C++ for remotely dumping manual mapped modules. Brief Explanation When you want to inject a module into a process and you don't want it to be found by typical routines load notifications, tls callbacks, etc you use manual mapping to get your module...
CVE-2022-22963-PoC
CVE-2022-22963 RCE PoC Minimal example to reproduce CVE-2022-22963 remote code execution in org.springframework.cloud:spring-cloud-function-core. Exploit Run the server mvn spring-boot:run Make a request curl -X POST -H 'spring.cloud.function.routing-expression:...
CVE-2025-2783
Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploit This repository contains a full-chain exploit implementation for CVE-2025-2783. The vulnerability resides in Chromium's Ipcz communication layer, allowing an attacker to achieve sandbox escape and arbitrary code execution from a...
CVE-2025-67887
CVE-2025-67887 1C-Bitrix = 25.100.500 Translate Module Remote Code Execution Vulnerability...
Analysis-And-POC-N8N-CVE-2025-68613
Overview n8n and CVE-2025-68613 n8n is a workflow automation platform used to integrate systems and services through visual flows and JavaScript expressions. CVE-2025-68613 is a critical Remote Code Execution RCE vulnerability, with CVSS 9.9 , affecting multiple versions of n8n. The flaw occurs i...
CVE-2021-21972
CVE-2021-21972 Vulnerability Description cve-2021-21972 is a code execution vulnerability A malicious attacker with access to port 443 can send a specially crafted request to vCenter Server, ultimately leading to remote arbitrary code execution. Vulnerability Detection 1γThe vulnerability is...