CVE-2026-65321-pyathena

CVE-2026-65321: SQL Injection in PyAthena via Backslash Quote-Escaping for Non-SELECT Statements Severity: Critical, CVSS v4.0 9.3 / CVSS v3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1:...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing Unpack src.zip zip -r src.zip src Build and run vulnerabl...

CVE-2024-42009

CVE-2024-42009 – Reflected XSS in Roundcube Webmail 📌 Overview This repository contains a Nuclei template and supporting resources to safely demonstrate and validate CVE-2024-42009 , a critical reflected XSS vulnerability in Roundcube Webmail. The flaw resides in the messagebody function in...

CVE-2025-14733

WatchGuard IKEv2 Scanner — CVE-2025-14733 Identify WatchGuard Firebox appliances vulnerable to CVE-2025-14733, a critical pre-authentication vulnerability in the Fireware OS IKEv2 implementation. This tool performs safe version detection through standard IKEv2 negotiation. It does not attempt...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

Moniker-Link-CVE-2024-21413-

Moniker-Link-CVE-2024-21413- On February 13th, 2024, Microsoft announced a Microsoft Outlook RCE & credential leak vulnerability with the assigned CVE of CVE-2024-21413 Moniker Link. Haifei Li of Check Point Research is credited with discovering the vulnerability. The vulnerability bypasses...

CVE-2025-55182

CVE-2025-55182 Scanner This repository contains a scanner tool for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Do not use this tool on systems you do not own or...

CVE-2026-41179

CVE-2026-41179 — rclone RC API Unauthenticated RCE ⚠️ EDUCATIONAL PURPOSES ONLY This repository is intended strictly for security research, education, and authorized lab environments. PSSec and the contributors of this repository do not condone, support, or take any responsibility for any...

relatorio-n8n.md

TryHackMe Report — n8n: CVE-2025-68613 Vulnerability: CVE-2025-68613 Publication: 19/12/2025 CVSS: 9.9 Critical Summary Report on the exploitation and analysis of the expression injection vulnerability in n8n that allows remote code execution RCE. Documents the environment, steps, tested payloads...

React2Shell-CVE-2025-55182-Advanced-Scanner

CVE-2025-55182 Advanced Scanner Advanced penetration testing tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js applications 📋 Table of Contents Overview Features Installation Usage Examples Bypass Techniques Technical Details Disclaimer Contributing License 🔍 Overview...

CVE-2025-49132

CVE-2025-49132 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2025-49132, a critical unauthenticated remote code execution RCE vulnerability in Pterodactyl Panel versions prior to 1.11.11. Vulnerability Details CVE ID : CVE-2025-49132 Severity : 10.0 Critical -...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Dahua Authentication Bypass PoC Exploit Simulation CVE-2021-33044 Overview Dahua IP cameras are IoT devices commonly used in security surveillance systems. Since they are often deployed on internal networks or accessible from the Internet, security vulnerabilities in IP cameras can severely impac...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...

CVE-2025-68664-LangGrinch-PoC

📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start 🐛 Vulnerability Deep Dive 🔬 Technical Root Cause Analysis ⚔️ Attack Chain Methodology 💀 Payload Arsenal 55+ 🎮 Operator's Strategy Guide...

cve-2024-52005-poc

CVE-2024-52005: ANSI Escape Sequence Injection in Git Overview This repository contains a Proof-of-Concept PoC demonstrating CVE-2024-52005, a vulnerability in Git that allows ANSI escape sequence injection through the sideband channel during Git operations. CVE-2024-52005 is a High severity CVSS...

CVE-2026-41462

🚨 CVE-2026-41462 - ProjeQtor Unauthenticated SQL Injection Critical Unauthenticated SQL Injection in ProjeQtor ≤ 12.4.3 📌 Overview CVE-2026-41462 is a critical unauthenticated SQL Injection vulnerability in the login functionality of the ProjeQtor project management tool. CVE ID : CVE-2026-41462...

log4shell

Log4Shell CVE-2021-44228 PoC Objective Reproduce, exploit, and remediate a known critical CVE in a Dockerised environment. This PoC demonstrates CVE-2021-44228 Log4Shell in a Spring Boot application. 1. Vulnerability Description CVE: 2021-44228 CVSS: 10.0 Critical Affected component: Apache Log4j...

CVE-2025-53770

CVE-2025-53770 This is a multiple site scanner for CVE-2025-53770 Unauthenticated RCE Vulnerability. Other scanners/PoCs:- https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 Sharepoint RCE Impact: Unauthenticated attackers can achieve remote...

CVE-2025-3102

CVE-2025-3102 The SureTriggers WordPress plugin contains a critical authentication bypass vulnerability CVE-2025-3102 that affects all versions up to and including 1.0.78...

CVE-2024-21534

CVE-2024-21534: Remote Code Execution Vulnerability in jsonpath-plus =10.0.7 Summary This repository contains a Proof of Concept PoC exploit for a critical Remote Code Execution RCE vulnerability in the jsonpath-plus package, affecting versions prior to 10.0.7. The issue stems from improper input...