CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 and CVE-2025-34323 Nagios Log Server Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server, along with a combined script to return a shell as root. CVE-2025-34322 After auth, replace your session ID into these two curl commands. The first one set the...

cve-2025-55182-poc

CVE-2025-55182 React2Shell - Prueba de Concepto Académica ⚠️ AVISO: SOLO USO EDUCATIVO Este repositorio contiene código funcional de explotación para una vulnerabilidad crítica CVSS 10.0. Está destinado estrictamente a fines de investigación académica, análisis de seguridad y educativos. No utilic...

CVE-2025-55182

Understanding React Server Components and the Flight Protocol React Server Components is a feature introduced in React 19 that allows components to be rendered on the server instead of in the client's browser. The server can handle complex computational tasks while only sending the rendered resul...

westone-CVE-2021-21972-scanner

westone-CVE-2021-21972-scanner VMware vCenter Server remote code execution vulnerability.A malicious attacker with access to port 443 can send a carefully constructed request to vCenter Server, which will eventually cause remote arbitrary code execution. Installation & Usage git clone...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability This is a Proof of Concept for CVE-2021-24085. 1. poc.py downloads the targets cert file with private key inside 2. YellowCanary generates the msExchEcpCanary csrf token for a specific user...

CVE-2018-1335

CVE-2018-1335 RCE vulnerability remote code execution on servers apache Tika-server with versions lower than 1.18 commands: sudo bash install.sh python2 exploit.py...

CVE-2020-9470

¿Qué es esto? Wing FTP Server 6.2.5 - Escalada de Privilegios Introducción Una debilidad en el manejo de sesiones HTTP dentro de Wing FTP Server permite a cualquier usuario local escalar privilegios a root en Linux, MacOS y Solaris. La explotación depende de una sesión administrativa ya...

cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container docker build -t cve-2025-55182:lab . docker run -...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

-CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

CVE-2025-55182

Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...

Block-Spring4Shell

Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...

CloudPanel-CVE-2023-33747

CloudPanel-CVE-2023-33747...

CVE-2021-41773

Apache 2.4.49 Path Traversal + Remote Code Execution CVE-2021-41773 Vulnerability Description This vulnerability affects versions of Apache HTTP Server 2.4.49. A path validation error allows remote attackers to perform Path Traversal using sequences like .%2e/ to access paths outside the configur...

gha-lab-51c6b6d0a0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of parse-community/parse-server at commit...

CVE-2026-108582

GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...

log4j2_CVE-2021-44228

log4j2 Environment Test Usage, Assume Personal Responsibility for Issues My test environment is Java 17. If needed, you can modify and re-import the project yourself. After starting the environment, the address is: http://127.0.0.1:8006/test...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387-Vulnerability-Checker LAB This Rust Code is designed to check SSH servers for the CVE-2024-6387 vulnerability Command-Line Arguments: ./main -f servers.txt -p 22,2222 -t 5...

EUVD-2026-96366

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...