CVE-2024-1813-POC

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauthenticated PHP Object Injection 🎥 Proof-of-Concept demo End-to-end: a guest stores a serialized PHP object through the public application form, the admin opens the applicants list, and the gadget chain drops a webshell. Unauthenticated PH...

CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC

CVE-2017-9841 — Prueba de Concepto PoC de Ejecución Remota de Código RCE en PHPUnit ⚠️ AVISO: Esta herramienta está destinada únicamente para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas que no poseas o para los que no tengas permiso explícito es ilegal...

CVE-2025-55182_PoC-Test-Server

CVE-2025-55182PoC-Test-Server CVE-2025-55182 React RCE Test Server...

CVE-2026-59734-POC

Hacker Glitch 🚨 CVE-2026-59734 — Coolify RCE Exploit OS Command Injection in Health Check → Remote Code Execution...

CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

CVE-2025-24813 - Apache Tomcat Partial PUT + Deserialization RCE 📋 Overview CVE-2025-24813 is a high‑severity vulnerability in Apache Tomcat that allows unauthenticated remote code execution when three conditions are met: 1. The default servlet has write access enabled readonly=false. 2. Partial...

mcp-pwn

CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution Summary MCPJam is an open-source MCP Model Context Protocol inspector and proxy used to connect, debug, and manage MCP servers. Versions = 1.4.2 expose the /api/mcp/connect endpoint without authentication or input validation. An...

CVE-2025-24893-

CVE-2025-24893- CVE-2025-24893 | Remote Code Execution Vulnerability on XWiki platform proof of concept...

apache_audit_cve-2026-23918

cve-2026-23918 Defensive audit tools for CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE and four related CVEs disclosed in the May 4, 2026 Apache Software Foundation security advisory. CVE| Severity| Component| Impact| Affected ---|---|---|---|--- CVE-2026-23918| High CVSS 8.8| HTTP/2| Double...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

React2Shell-CVE-2025-55182-PoC-Reverse-Shell

🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...

CVE-2026-3844

CVE-2026-3844 PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

CVE-2024-5084-Red-Team

🚀 HashForm Exploit – Lab Demo This repository contains a proof-of-concept exploit for CVE-2024-5084, a vulnerability found in the Hash Form WordPress plugin. It’s meant only for learning, lab testing, and security research. 📌 About the Vulnerability CVE ID: CVE-2024-5084 Issue: Unauthenticated fi...

CVE-2025-48703

CVE-2025-48703 CVE-2025-48703 is a critical vulnerability in CentOS Web Panel CWP that allows unauthenticated attackers to perform remote code execution RCE by bypassing authentication and executing system commands. The vulnerability affects CWP versions 0.9.8.1204 and earlier, and has been patch...

bash-apocalypse

Bash Apocalypse Automated exploitation toolkit for CVE-2014-6271 Shellshock A complete security research project demonstrating the Shellshock vulnerability that affected millions of servers in 2014. Includes automated scanning, exploitation capabilities, and defensive recommendations. Demo What i...

React4Shell

React2Shell Exploit Prueba de concepto PoC para la vulnerabilidad de ejecución remota de código en React Server Components RSC / Next.js. Descripción Existe una vulnerabilidad de ejecución remota de código sin autenticación previa en React Server Components versiones 19.0.0, 19.1.0, 19.1.1 y...

CVE-2023-34468-PoC

CVE-2023-34468 PoC for Apache NiFi Educational proof-of-concept PoC for CVE-2023-34468 affecting Apache NiFi versions prior to 1.22.0. This repository demonstrates how abuse of H2 JDBC URL configuration can lead to authenticated remote code execution RCE in vulnerable Apache NiFi installations...

cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770: Langflow execglobals Remote Code Execution CVSS 9.8 Critical | ZDI-CAN-27325 | CWE-829: Inclusion of Functionality from Untrusted Control Sphere Overview CVE-2026-0770 is a critical unauthenticated remote code execution vulnerability in Langflow, a low-code application framework fo...

CVE-2021-42013

CVE-2021-42013 Colaborador 석은호@eunho87 CVE-2021-42013 Apache http Server Path Traversal Resumen de la vulnerabilidad Un error en el manejo de la normalización de rutas en Apache HTTP Server 2.4.50 permite leer archivos arbitrarios o ejecutar código remoto sin autenticación. Se originó debido a un...

CVE-2025-55182

CVE-2025-55182 React2Shell PoC de Exploit ⚠️ ADVERTENCIA: Este proyecto utiliza intencionalmente software vulnerable solo con fines de investigación de seguridad. Créditos Todos los créditos del PoC son para @maple3142 Configuración y Ejecución Docker root@kitploit: docker-compose up --build La...