CVE-2021-42013

CVE-2021-42013 - Apache 2.4.50 Path Traversal & Remote Code Execution RCE ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author Walnut Security Services Pvt. Ltd Description An attacker could use a path traversal attack...

metasploitable2-vsftpd-writeup

Metasploitable2 — vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux ↔ Metasploitable2 environment. Objective Practice the core penetration testing workflow — reconnaissance,...

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 Poc POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accept:...

CVE-2024-36104-PoC

CVE-2024-36104-PoC Proof-of-concept for CVE-2024-36104, an unauthenticated remote code execution vulnerability in Apache OFBiz before 18.12.14. OFBiz's ControlServlet resolves an unauthenticated view forgotPassword before canonicalizing the request path. Appending /%2e/%2e/ collapses back onto...

CVE-2025-26865

CVE-2025-26865: FreeMarker Server-Side Template Injection via the "ecommerce" plugin in Apache OfBiz Due to a regression between 18.12.17 and 18.12.18 the fix for finding CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz was no longer enforced which reopened the possibilit...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 Information Disclosure + RCE All-in-One This PoC writes a file to the target, here it writes phpinfo. If you need other functionality, modify it yourself. Do not use for illegal purposes...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

WebKit-Bug-256172

WebKit-Bug-256172 Safari 1day RCE Exploit, might be patched in iOS 16.5.1/macOS 13.4.1 Confirmed exploit works on macOS 13.3.1, iOS 15.8.2. Description Currently only works on macOS 13.0.1 x8664 due to hardcoded offsets. Implemented addrof/fakeobj, r/w primitive Patch...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted Git service similar to a private version of GitHub, designed to run easily on low-resource servers. The CVE-2025-8110 vulnerability is a critical security flaw that allows an attacker to bypass path restrictions by using symlinks. By...

CVE-2026-64638

CVE-2026-64638 // XSS2Shell Technical analysis and defensive mitigation matrix for the CVE-2026-64638 XSS2Shell vector, a critical parsing inconsistency in the WordPress Core authentication screen that makes it possible to chain a reflected pre-authentication Cross-Site Scripting XSS with browser...

CVE-2024-57376

CVE-2024-57376 Pre-auth remote code execution exploit for D-Link DSR-250 and DSR-250N Security advisory: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Usage $ python3 exploit.py usage: Example $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250...

CVE-2023-46747-RCE

Vulnerability Details fofa： title="BIG-IP" || iconhash="-335242539" shodan title:"BIG-IP" Affected versions https://my.f5.com/manage/s/article/K000137353 Vulnerability Recurrence 1. At this time, the user here is only admin: 2. Execute the script: git clone...

CVE-2024-4577

CVE-2024-4577 Overview CVE-2024-4577 is a security vulnerability that affects PHP servers in the following versions: PHP 8.3.x 8.3.8 and earlier PHP 8.2.x 8.2.20 and earlier PHP 8.1.x 8.1.29 and earlier All versions prior to 8.0 Unsupported versions 7.x and 5.x This vulnerability is a remote code...

OA-tongda-RCE

OA-tongda-RCE | Office Anywhere Web-based Intelligent Office System Backend Getshell No Authentication Required 1. Arbitrary file upload vulnerability /ispirit/im/upload.php 2. Local file inclusion vulnerability /ispirit/interface/gateway.php Command Execution Bypass: exec"cmd /c ".$command;...

CVE-2026-6951

CVE-2026-6951 simple-git Remote Code Execution ★ CVE-2026-6951 simple-git --config Option Filter Bypass RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 Overview CVE-2026-6951 is a remote code execution vulnerability in simple-git caused by an incomplete f...

CVE-2026-90847

Overview iuxset.cgi contains an authenticated remote code execution RCE vulnerability via file upload. It lives in the function that's invoked when iuxset.cgi is called with tmenu=camera and smenu=systemsetup, which maps to Camera Management → System Setup in the administrator web UI. Although it...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600-Drupal-RCE...

CVE-2024-37054

CVE-2024-37054 — MLflow Pickle Deserialization RCE Proof-of-concept exploit for a critical pickle deserialization vulnerability in MLflow Tracking Server, enabling authenticated remote code execution. ⚠️ For educational and authorized security testing only. Do not use against systems you do not ow...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

CVE-2019-15029

CVE-2019-15029 The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit Module I wrote a simple Metasploit module to exploit this issue fusionpbxservices.rb, you just have to download it and copy it into metasploit modules directory...