CVE-2019-7609

CVE-2019-7609 New CVE-2019-7609 which works with python 13 exploit CVE-2019-7609kibana RCE on right way by python3 scripts Reference: https://github.com/LandGrey/CVE-2019-7609 snapshot usage usage: python3 CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional...

CVE-2025-49132-PoC

CVE-2025-49132 PoC por Pwndalf Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-49132, una vulnerabilidad de Ejecución Remota de Código RCE que afecta a Pterodactyl Panel -l -p...

EUVD-2026-87984

utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the librar...

CVE-2026-101051

Cloudreve versions prior to 4.16.1 are vulnerable to a path traversal flaw during remote downloads. The application fails to properly sanitize file paths returned by remote downloaders, which allows authenticated users to exploit path traversal sequences in downloader metadata. This enables an at...

CVE-2026-101051 Cloudreve before 4.16.1 Path Traversal via Remote Download

Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside the selected destination directory. Attackers can exploit path traversal sequences in downloader metadata to write files to unexpected locations withi...

EUVD-2026-87980

Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside the selected destination directory. Attackers can exploit path traversal sequences in downloader metadata to write files to unexpected locations withi...

CVE-2026-101051 Cloudreve before 4.16.1 Path Traversal via Remote Download

Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated users to create files outside the selected destination directory. Attackers can exploit path traversal sequences in downloader metadata to write files to unexpected locations withi...

FOISted

| / |/| | | | | | | | | || | | | | | | ||| | | || | | / / | | | | | | || | | || / | | || /|/ |, | FOISted: un jailbreak remoto para MikroTik Descripción FOISted es un exploit para dos vulnerabilidades posteriores a la autenticación en el RouterOS de MikroTik. Puede usarse para hacer jailbreak de...

Wincrash

Wincrash I'm not responsible for what you use this to accomplish and should only be used for education purposes. CVE-2019-0708 - when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution...

CVE-2021-44228-Log4j-JNDI

访问 项目启动之后访问： http://127.0.0.1:9090/vul 漏洞复现 JDK 版本：java8u92 （避免使用过高的版本，建议同我一致，高版本对JNDI注入有一定限制） java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "bash -c echo,b3BlbiAtYSBDYWxjdWxhdG9y|base64,-d|bash,-i" -A 127.0.0.1 使用以上工具生成PAYLOAD。 访问...

Roundcube_CVE-2025-49113

RCE in Roundcube CVE-2025-49113 - My Obsidian note .md date time Status: Completed Lab: Easy Tags: RCE | PHP | LABTHM | EXPLOIT | CVE by KRPT Paulo G. Werneck - Linkedin - in.com/pgw-script Impact : remote command execution post-login CVSS 9.9 Affected versions : ≤ 1.5.10 / 1.6.10 Patched : 1.5.1...

Pickle-Deserialization-Exploit-in-Transformers

Transformers 中的 pickle 反序列化漏洞利用 实验简介 介绍pickle 反序列化机制及其reduce攻击原理，复现 Hugging Face Transformers 库中的反序列化漏洞CVE-2024-3568，分析 Transformers 库中的安全隐患并提出安全加固的有效方案。详细内容参见实验PDF文档 。 （poc作者代码详见CVE-2024-3568或者authorinf 文件夹） 关键信息 1. 漏洞位置 TFAutoModel.loadrepocheckpoint 方法（Transformers ≤ v4.37.2） 2. 攻击原理 恶意检查点中的...

TIC4301_Project

TIC4301Project TIC4301 Project - CVE-2021-40444 Descargue las siguientes cajas de Vagrant: Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNtmU2/view?usp=sharing Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing Importe las cajas con los...

CVE-2025-60655

CVE-2025-60655 - 通过无限制上传实现远程代码执行 RCE | ---|--- 研究人员| DotAdrien 严重性| 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 软件| Script Pag 描述 图像上传系统中存在一个严重漏洞，可导致远程代码执行 RCE。该应用仅依赖客户端 JavaScript 来验证文件类型。通过绕过这些 JS 检查，攻击者可以上传恶意的 PHP 脚本。结合 SQL 注入获取文件路径，攻击者可以在服务器上执行任意代码。...

CVE-2018-11235

CVE-2018-11235 Vulnerability Overview Vulnerability Name: Git Security Vulnerability CNNVD ID: CNNVD-201805-1020 Severity Level: High CVE ID: CVE-2018-11235 Vulnerability Type: Security Feature Issue Published Date: 2018-05-31 Threat Type: Remote Updated Date: 2019-04-01 Vendor: git-scm...

Nagios-CVE-2019-15949-RCE

Nagios-CVE-2019-15949-RCE-Poc un PoC en Python para el CVE-2019-15949 Resumen Existe una vulnerabilidad en Nagios XI = 5.6.5 que permite a un atacante aprovechar un RCE para escalar privilegios a root. El exploit requiere acceso al servidor como el usuario 'nagios', o acceso CCM a través de la...

CVE-2025-49113-PoC

CVE-2025-49113 Roundcube RCE PoC 🚀 Cómo ejecutar el proyecto 1. Iniciar el servidor vulnerable cd Stand docker-compose up -d 2. Ejecutar el script contra el objetivo cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test --command "id" 📌 Requisitos...

CVE-2022-26809-RCE

CVE-2022-26809-RCE Este repositorio contiene un PoC para la ejecución remota de código CVE-2022-26809 Esto es una prueba, no funciona...

CVE-2024-34328

CVE-2024-34328 Open Redirection via Host Header 📝 Overview Vulnerability Title : Open Redirection via Host Header Product : Sielox AnyWare Version Affected : 2.1.2 CVE ID : CVE-2024-34328 Severity : Medium Attack Vector : Remote Impact : Open Redirection / Phishing 🧨 Description An attacker can...

log4j-test

Ejemplo sencillo que muestra CVE-2021-44228 en acción Explicación Para reproducir este problema, estoy eliminando la dependencia transitiva de logging de SpringBoot. En su lugar, estoy añadiendo spring-boot-starter-log4j2 spring-boot-starter-log4j2 trae log4j-core, que contiene la vulnerabilidad ...