Exploitation proof-of-concept against CVE-2025-12428 for Chromium V8 JavaScript issues like type confusion
developer-to-node privilege escalation via privileged git-clone container
This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.
developer-to-node privilege escalation via path traversal
DOM-based Cross-Site Scripting (XSS) Vulnerability in novel V3.5.0 (CWE-79)
git-clone allowing privilege escalation from developer to worker node
CVE-2025-61882: Oracle E-Business Suite RCE Scanner and Exploit
🚨 CVE-2025-61884 — High-Risk Oracle EBS Configurator Info Disclosure
CVE-2025-61882 — Critical Oracle EBS RCE: Analysis & Response
Exploit Code for CVE-2018-15473
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to register as an administrator.
heap overflow allowing execution of arbitrary commands
Langflow 在对用户提交的“验证代码”做 AST 解析和编译时,在未做鉴权与沙箱限制的情况下调用了 Python 的 compile()/exec()(以及在编译阶段会评估函数默认参数与装饰器),攻击者可把恶意载荷放在参数默认值或装饰器里,借此在服务器上下文中执行任意语句(反弹 shell、下载器、横向移动等)
CVE-2025-61882: Oracle E-Business Suite RCE Scanner and Exploit
path traversal tool based on cve 2025 8088 vurnelability