1190894 matches found
CVE-2021-21300
CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...
CVE-2022-42889-POC
CVE-2022-42889-POC Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889. What's the Issue : Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefi...
CVE-2026-5364
CVE-2026-5364 CVE-2026-5364 is a CVSS 8.1 High Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Unauthenticated Arbitrary File Upload viasanitizefilename Bypass CVSS 8.1 High | Affected: = 1.1.3...
pfsense-api-export-key-get
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-export-key-get pfsense-api-export-key-get Class: Privilege leftover Reach: Remote pfSense Plus MIM API Netgate pin b4acd7ca - public OpenAPI + generated Python client for the Nexus Multi-instance Managemen...
cve-2010-2075-analysis
CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...
React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web
React2Shell CVE-2025-55182: The Deserialization Bug That Broke the Web ⚡ React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups. ⏩ TL;...
CVE-2023-6634
CVE-2023-6634 Exploit Script Description This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution RCE due to improper input...
CVE-2022-42889
CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.10 which is vulnerable to CVE-2022-42889. Running the application Replace DemoApplication.java nc command by your host ip address. Listening with netcat: $ nc -l -p 30000 Build and run docker...
chromepass
Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...
Solar-exploiting-log-4j
🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...
Spring4Shell-POC
Spring4Shell-POC CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof Of Concept/Information + A vulnerable Tomcat server with a vulnerable spring4shell application. Early this morning, multiple sources has informed of a possible RCE exploit in the popular java framework spring. The naming of this fl...
CVE-2024-37054
CVE-2024-37054 — MLflow pyfunc Deserialization RCE Severity: Critical Affected: MLflow 0.9.0 – 2.14.1 Type: Arbitrary code execution via Python pickle deserialization Description mlflow.pyfunc.loadmodel deserializes pythonmodel.pkl from the artifact store without any sanitization. An attacker who...
CVE-2021-41773
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...
sshtunnel
|Tests| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...
CVE-2022-33980-Apache-Commons-Configuration-RCE
CVE-2022-33980-Apache-Commons-Configuration-RCE...
CVE-2021-22911
CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1 The getPasswordPolicy method is vulnerable to NoSQL injection attacks and does not require authentication/authorization. It can be used to take over accounts by leaking password reset tokens. Taki...
CVE-2026-6433
CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS, JS & PHP · Unauthenticated SQL injection → RCE via eval Affected: FlipperCode Custom CSS, JS & PHP ≤ 2.0.7 · WordPress plugin surface via admin-ajax.php At a glance Item| Detail ---|--- Vector| Unauthenticated SQLi tunneled through plugin...
Better-CVE-2022-29464
Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...
BackDoorSim
BackdoorSim Overview BackdoorSim is a remote administration and monitoring tool designed for educational and testing purposes. It consists of two main components: ControlServer and BackdoorClient. The server controls the client, allowing for various operations like file transfer, system monitorin...