CVE-2026-16181

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a security bypass. The root cause is improper authorization , which could allow a remote attacker to circumvent security restrictions. No s...

EUVD-2026-94958

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass security restrictions due to improper authorization...

SMB-LINUX-CVE-2025-37899

Use-After-Free Vulnerability in Linux Kernel's ksmbd CVE-2025-37899 Description A use-after-free vulnerability has been discovered in the ksmbd module of the Linux kernel, responsible for implementing the SMB Server Message Block protocol for network file sharing. This vulnerability, identified a...

nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Some debug notes and exploit not blind Exploit Use burpsuite, modify ls / -al in the request. Note that double quotes will be replaced by single quotes. POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.14; rv:63.0...

CVE-2024-50379-POC

Explotación y POC de CVE-2024-50379 Este repositorio contiene una Prueba de Concepto POC para CVE-2024-50379 , una vulnerabilidad que afecta a Apache Tomcat. El problema implica una condición de carrera de Tiempo de Verificación Tiempo de Uso TOCTOU , que puede llevar a Ejecución Remota de Código...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

log4j2-rce-poc

Log4j2 RCE Vulnerability POC A bare minimum proof-of-concept for Log4j2 JNDI Remote-Code-Execution vulnerability CVE-2021-44228. This is intended for educational purposes to help people who are not security researchers to understand how it works and how large the impact is. The POC bypasses the...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate This POC uses Spring / Hibernate, however a similar approach of rmi - deserialization could be used to trigger any deserialization vulnerability TL;DR $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-binary...

CVE-2024-10542

Poc Of CVE-2024-10542 and CVE-2024-10781 Broken Authentication in Spam protection, AntiSpam, FireWall by CleanTalk Plugin = 6.43.2 Disclaimer: The information provided in this document regarding for CVE-2024-10542 is for learning and educational purposes only. We do not encourage or authorize the...

CVE-2022-30190-Follina-Lab

🔴 CVE-2022-30190 — Follina MSDT RCE Lab Researcher: Abhimanyu Rawat Role: Technical Research & Cyber Security Operations Intern Date: May 8, 2026 📌 What is Follina? CVE-2022-30190 nicknamed "Follina" is a zero-day Remote Code Execution RCE vulnerability in Microsoft Windows that allows an attacke...

cve-2022-24112

Apache APISIX 2.12.1 Remote Code Execution and Docker Lab Let's clone using gitclone this repository, then we can navigate to apisix-docker/examples. In this docker-compose.yml file, we already change into image: apache/apisix:2.12.0-alpine, because the vulnerability in this version, then let's...

cve-2019-19781

CVE-2019-19781 Questo è stato caricato solo perché altri ricercatori hanno pubblicato il loro codice per primi. Avremmo sperato di tenerlo nascosto ancora per un po', dando ai difensori il tempo adeguato per applicare le patch ai loro sistemi. Siamo tutti per la divulgazione responsabile, ma in...

ds3-nrssr-rce

Update: Dark Souls III 1.15.1 A new game update, 1.15.1, has been released for Dark Souls III on 2022/08/25, along with the restoration of online services. This update fixed both CVE-2022-24125 and CVE-2022-24126 , along with a wide variety of other potential security vulnerabilities present in t...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 A remote code execution vulnerability occurring in CGI mode of PHP language registered in the detection of PHP-CGI CVE-2024-4577 Argument Injection events from external IPs to internal servers. This is an event that occurs when PHP is executed in CGI mo...

cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...