CVE-2026-107815

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

CVE-2021-41773

CVE-2021-41773 Path traversal in Apache HTTP Server 2.4.49 CVE-2021-41773 For educational purposes only Test Set up the PoC environment $ docker build -t cve-2021-41773 . $ docker run --rm -dit -p 8000:80 cve-2021-41773 Confirm it works $ curl http://localhost:8000 It works! Exploit It is not...

CVE-2026-108158 plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

EUVD-2026-95906

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

CVE-2026-108158

The plugNmeet Server through 2.5.2 version is vulnerable to a path traversal vulnerability in the /api/whiteboard/convert endpoint. An authenticated meeting participant can provide crafted filePath values containing ../ sequences to force the server to convert arbitrary files into page images. Th...

react2shell-evolved

React2Shell Scanner High Fidelity Detection for RSC/Next.js RCE Scanner for detecting Remote Code Execution RCE vulnerabilities in React Server Components and Next.js applications. About React2Shell Scanner is a specialized tool for identifying Remote Code Execution RCE vulnerabilities in...

CVE-2026-107814

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...

trevorc2

trevorc2 TrevorC2 - القيادة والتحكم عبر سلوك شرعي عبر HTTP كتب بواسطة: ديف كينيدي @HackingDave الموقع: https://www.trustedsec.com لاحظ أن هذا إصدار مبكر جدًا - سيتم إضافة العشوائية والتشفير الثقيل قريبًا. TrevorC2 هو نموذج خادم/عميل لإخفاء القيادة والتحكم من خلال موقع ويب يمكن تصفحه بشكل طبيعي...

SQLC2

SQLC2 SQLC2 هو سكربت PowerShell لنشر وإدارة نظام أوامر وتحكم يستخدم SQL Server كخادم تحكم وكوكيل في الوقت نفسه. في جوهره، SQLC2 هو مجرد سكربت PowerShell، وسكربت TSQL، وعدد قليل من الجداول في مثيل SQL Server يتتبع الوكلاء والأوامر والنتائج. ليس شيئًا معقدًا للغاية، لكنه قد يكون مفيدًا في بعض المها...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）dos This bug exploit a memory error when sending too many \r\n in a single connexion. Example $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1 port 8080: Connection refused...

CVE-2016-10140-Zoneminder-Poc

ZoneMinder Unauthorized Access CVE-2016-10140 Poc -- Batch Verification Script Vulnerability Description ZoneMinder is an open-source video surveillance system. When abnormal events occur, you can receive email or SMS notifications. There is an information disclosure and authentication bypass...

CVE-2026-75429_PowerJob_friend_process_RCE

Exécution de code à distance sur le serveur PowerJob via /friend/process non authentifié injection Groovy 1. Résumé Le serveur PowerJob framework distribué d'ordonnancement de tâches / de calcul expose le point de terminaison /friend/process sur son port HTTP 10010 de la couche de transport...

CVE-2018-8581

CVE-2018-8581 هذه ثغرة اختراق جانبي ورفع صلاحيات على مستوى البريد الإلكتروني يمكنها، بعد امتلاك بيانات حساب بريد إلكتروني بصلاحيات عادية، إتمام عملية تفويض والاستيلاء على صندوق الوارد لبريد مستخدمين آخرين بما في ذلك مسؤولو النطاق هذا السكربت EXP هو نسخة مطوّرة بنقرة واحدة مبنية على PoC الأصلي، وب...

CVE-2024-21006_PoC

CVE-2024-21006 PoC CVE-2024-21006 is a critical Remote Code Execution RCE vulnerability affecting Oracle WebLogic Server. The flaw is related to the insecure use of the IIOP Internet Inter-ORB Protocol and JNDI Java Naming and Directory Interface protocols, allowing an unauthenticated remote...

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: ثغرة اجتياز المسار Path Traversal من نوع Zero-Day في خادم Apache HTTP Server مستغلة في 5 أكتوبر، قام مشروع Apache HTTP Server بتصحيح CVE-2021-41773، وهي ثغرة اجتياز مسار وكشف ملفات في Apache HTTP Server، وهو خادم ويب مفتوح المصدر لنظامي التشغيل Unix و Windows ويُعد ...

CVE-2025-59528-PoC

CVE-2025-59528 PoC éducatif Usage éducatif uniquement. Ce projet est destiné à la recherche en sécurité contrôlée, aux démonstrations en classe et aux tests autorisés dans un laboratoire isolé. Ne l'utilisez pas contre des systèmes, réseaux, applications ou comptes que vous ne possédez pas ou pou...

CVE-2017-16568

CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

CVE-2026-39453

Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots...

EUVD-2026-95886

ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling ilQtiMatImageSecurity that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a .htacces...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...