CVE-2021-41773-POC

CVE-2021-41773 Vulnerability Reproduction Report Vulnerability Overview CVE ID : CVE-2021-41773 Vulnerability Name : Apache HTTP Server Path Traversal Vulnerability Risk Level : High CVSS 7.5 Affected Version : Apache HTTP Server 2.4.49 Vulnerability Description : Apache HTTP Server version 2.4.4...

directus-security

directus-security Audit any Directus instance for the misconfigurations that actually leak data — public-role read exposure, user enumeration, unauthenticated version/schema leaks, GraphQL introspection, and the search-param field-enumeration oracle — and prove each one live with an anonymous...

CVE-2015-5287

CVE-2015-5287 RHEL 7.0/7.1 - 'abrt/sosreport' Local Privilege Escalation Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️...

analyze-Exploit-CVE-2023-22518-Confluence

Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518 : This vulnerability is described as an "improper authorization vulnerability in Confluence's database and server". The flaw affects On-premises versions of Atlassian products. SETUP Set up the environment. Use the vulnerable...

CopyFail-Scanner-CVE-2026-31431

CopyFail-Scanner-CVE-2026-31431 CopyFail-Scanner is a tool that identifies the CopyFile vulnerability CVE-2026-31431. Enumerates the system Assesses exposure to the vulnerability Indicates the status vulnerable/not vulnerable Suggests and, optionally, executes a secure update based on the distro...

cve-2021-45046

Although log4j RCE CVE-2021-44228 was patched in 2.15, a new vulnerability, CVE-2021-45046 causing DoS, has been discovered. Below are the test results. Test Environment log4j-2.15.0 api , core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Log4j RCE CVE-2021-44228 syntax test - Not Vuln 2...

CVE-2025-49844

🚨 CVE-2025-49844 RediShell - Complete Guide ⚠️ Just for Learning, Not Hacking ; ⚠️ Hey! This is a simple tool I made to help people check if their Redis servers are vulnerable to the bug. It's not meant for actual attacks - just for learning and protecting your own stuff. What's This All About?...

3DPrint-Lite-1.9.1.4

3DPrint-Lite-1.9.1.4 WordPress Plugin 3DPrint Lite 1.9.1.4 - Arbitrary File Upload...

CVE-2024-37742

Guide to Reproduce CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows...

poc-submodule

This repository does not have a README...

Blackash-CVE-2025-61882

🛡️🚨 CVE‑2025‑61882 — Critical Pre‑Auth Remote Code Execution in Oracle E‑Business Suite EBS 🚨🛡️ Short summary: Critical pre‑auth remote code execution in Oracle E‑Business Suite EBS — affects 12.2.3 → 12.2.14, CVSS 9.8 , actively exploited in the wild ransom/ extortion activity reported...

CVE-2019-10392_EXP

CVE-2019-10392EXP Jenkins Git Client Authenticated RCE CVE-2019-10392Exp Usage usage: Jenkins Git Client 2.8.2. -h -u TARGET -U USERNAME -P PASSWORD -i ITEM -I INTERACTIVE -c COMMAND optional arguments: -h, --help show this help message and exit -u TARGET, --target TARGET Target. -U USERNAME,...

CVE-2018-25031

Swagger UI Cross-Site Scripting POC: CVE-2018-25031 using Selenium in Python This repository contains a Python script that demonstrates a proof of concept POC of a Cross-Site Scripting XSS vulnerability in Swagger UI, using the Selenium library. The goal of this POC is to identify websites that a...

CVE-2023-1454-EXP

JeecgBoot SQL CVE-2023-1454 Exploit 1. Vulnerability Details jeecg-boot version 3.5.0 has an SQL injection vulnerability, which stems from a security issue in the file jmreport/qurestSql, leading to SQL injection via the parameter apiSelectId. 2. Usage python3 CVE-2023-1454.py optional arguments:...

CVE-2026-24061-GNU-inetutils-Telnet-Detector

CVE-2026-24061 GNU inetutils Telnet Detector A safe, passive detection tool for identifying potential exposure to CVE-2026-24061 , a vulnerability affecting certain versions of GNU inetutils telnet. This project is designed for DevOps pipelines , infrastructure audits , and defensive security...

log4j-recognizer

log4j-recognizer A utility to look for log4j in the currently running JVM CVE-2021-44228 Log4Shell. This is useful for systems that allow plugins to introduce their own jars. Therefore, you can find if someone brought log4j in a dangerous version. Usage Just instantiate Log4jRecognizer with your...

Metinfo-6.1.2-SQL-injection

Metinfo-6.1.2-SQL-injection Metinfo 6.1.2 SQL injection script 0-sec.org...

Sovereign-Echo-33017

Exploit Title: Langflow 1.8.1 - Unauthenticated Remote Code Execution RCE Date: 2026-03-21 Exploit Author: Americo N. F. Simoes SimoesCTT Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: = 1.8.1 Tested on: Linux/Fedora 40 CVE: CVE-2026-330...

Gallery-Plugin-SQL-Injection

Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Date: 2024-07-05 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: Navigate to the admin panel of your...

openssl_g2.5_v1_0_1g

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...