cve-2014-7912

cve-2014-7911 Exp for cve-2014-7911 which can get system privillage, based on most of the codes of others but different gadget 1. install the apk and click the button 2. system server will restart 3. will write system id100 into /data/1.txt...

cve-2022-36804

CVE-2022-36804: RCE pre-autenticazione in Atlassian Bitbucket Server Una vulnerabilità critica di command injection è stata trovata in molteplici endpoint API di Atlassian Bit bucket Server e Data center. Questa vulnerabilità riguarda tutte le versioni di Bitbucket Server e Data Center rilasciate...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: crossplane-function-extra-resources, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, cluster-api-provider-vsphere-fips, litmus-chaos-operator,...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, kyverno, zitadel, commercial-gitlab-workhorse-ee, loki, containerd, external-dns, flux, cosign-fips, omnictl-multiarch-fips, kube-conformance, tigera-operator, commercial-gitlab-workhorse-ee-fips, qemu-guesthelper, commercial-gitlab-rails-ee-fips,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: grafana, prometheus-adapter, ingress-nginx-controller, argo-cd, opencost, terragrunt, falco-no-driver, kyverno-policy-reporter, hubble-ui, filebrowser, flux-source-controller, cert-manager, loki, rclone, kyverno-policy-reporter-ui, argo-workflows,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: grafana, prometheus-adapter, ingress-nginx-controller, argo-cd, opencost, terragrunt, falco-no-driver, kyverno-policy-reporter, hubble-ui, filebrowser, flux-source-controller, cert-manager, loki, rclone, kyverno-policy-reporter-ui, argo-workflows,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: cert-manager, loki, spire-server, k8s-device-plugin, karpenter, ingress-nginx-controller, flux, kubernetes, falco-no-driver, external-dns, aactl...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: cert-manager, loki, spire-server, k8s-device-plugin, karpenter, ingress-nginx-controller, flux, kubernetes, falco-no-driver, external-dns, aactl...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: cert-manager, loki, spire-server, k8s-device-plugin, karpenter, ingress-nginx-controller, flux, kubernetes, falco-no-driver, external-dns, aactl...

react2shellpoc

Questo repository contiene una prova di concetto che dimostra come una specifica classe di vulnerabilità dei React Server Component si comporta all'interno di un ambiente di formazione controllato e legale. Manuale ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /...

Assignement_3-CVE-2017-7269

CVE-2017-7269 Name : Killian Munt-Buron and Naji Ullah Abbasi Description of the CVE CVE-2017-7269 is a buffer overflow vulnerability in Microsoft Windows Server 2003 R2. The vulnerability is in the ScStoragePathFromUrl function in the WebDAV. This vulnerability allows to execute arbitrary code v...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

minecraft-log4j-honeypot

Minecraft Log4j Honeypot This honeypots runs fake Minecraft server 1.7.2 - 1.16.5 without snapshots waiting to be exploited. Payload classes are saved to payloads/ directory. Requirements Golang 1.16+ Running Natively git clone https://github.com/Adikso/minecraft-log4j-honeypot.git cd...

CVE-1999-0678

CVE-1999-0678: Detection & Remediation Project Author: Pham Huu Minh Date: December 2025 Project Overview This project demonstrates the complete lifecycle of a vulnerability assessment, specifically targeting the legacy Directory Traversal vulnerability CVE-1999-0678 on an Apache Web Server. The...

l4srs

l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-2021-44228 to build run cargo +nightly build This version will let you build command classes, dynamically serve a mini meterpreter that runs in a thread of the exploited Java app, and runs the LDAP and HTTP servers. This version servers...

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

cve-2024-6387_hassh

CVE-2024-6387 HASSH Fingerprints HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 regreSSHion. The primary goal of this repository is to share the generated HASSH fingerprint database. The scripts use the Shodan API to compile a list of HASSH fingerprints...

CVE-2022-36234

Descripción de CVE-2022-36234 Se descubrió que la confirmación 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 del Servidor TCP SimpleNetwork contiene una vulnerabilidad de doble liberación double free que se explota mediante paquetes TCP manipulados. Provocar la doble liberación permitirá a los cliente...