CVE-2024-11393

CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

EvilVM

EvilVM EvilVM compiler for information security research tools. The project is built around a native code Forth compiler that is deployed as a position independent shellcode. It provides a platform for remote code execution, useful in information security contexts. NolaCon 2019 Presentation I...

CVE-2026-113101

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is due to a use-after-free condition in the SiteIsolation component, which occurs when memory is...

cve-2025-3248

CVE-2025-3248 Langflow RCE Scanner A Python tool for scanning and exploiting the CVE-2025-3248 vulnerability, which allows remote code execution RCE in Langflow applications. Features Single-target scanning and command execution Batch URL scanning Interactive shell mode Multi-threaded batch...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

CVE-2022-22916

CVE-2022-22916 CVE-2022-22916, O2OA RCE Remote Command Execution O2OA RCE Remote Command Execution CVE-2022-22916 O2OA is an enterprise information system custom development platform solution based on J2EE distributed architecture, integrating mobile office and smart office, supporting private...

CVE-2021-41773_CVE-2021-42013_Exploits

Exploiting CVE-2021-41773 and CVE-2021-42013 Overview This repository focuses on exploiting two vulnerabilities in Apache HTTPD: CVE-2021-41773 and CVE-2021-42013. These CVEs represent path traversal vulnerabilities that can potentially lead to file mapping and remote code execution on Apache HTT...

CVE-2011-2523-poc

CVE-2011-2523-poc This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules Requirements sudo python3 -m pip install pwntools Install git clone https://github.com/4m3rr0r/CVE-2011-2523-poc.git cd CVE-2011-2523-poc/ chmod...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullrequesttarget Injection → Supply Chain Compromise Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Upstream advisory: sherlock-project/sherlock GHSA advisory NVD...

CVE-2026-113210

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563354824...

CVE-2024-9441

CVE-2024-9441 Description of the Vulnerability: This code exploits a Remote Code Execution RCE vulnerability that occurs due to improper input sanitization in a PHP-based web application. The specific weakness is in the "forgot password" functionality index.php?c=user&m=forgotpassword, where user...

CVE-2024-4879

CVE-2024-4879 Exploit & PoC - Nuclei Template CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticate...

CVE-2021-3129_exploit

CVE-2021-3129exploit Exploit for CVE-2021-3129 Lab setup: $ git clone https://github.com/laravel/laravel.git $ cd laravel $ git checkout e849812 $ composer install $ composer require facade/ignition==2.5.1 $ php artisan serve Usage: $ git clone https://github.com/nth347/CVE-2021-3129exploit.git $...

CVE-2026-3395-MaxSite-CMS-Unauthenticated-RCE

CVE‑2026‑3395 — MaxSite CMS Unauthenticated Remote Code Execution Overview Unauthenticated Remote Code Execution RCE vulnerability in MaxSite CMS ≤ 109.1. The flaw arises from weak authorization checks in the MarkItUp editor plugin’s AJAX endpoints, combined with unsafe execution of user‑supplied...

CVE-2023-35813_PoC

curl -k -v -X POST "https://target/sitecorexaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index" -H "Content-Type: application/x-www-form-urlencoded" --data-urlencode "ISEVENT=1" --data-urlencode "SOURCE=" --data-urlencode "PARAMETERS=ParseControl" ""...

CVE-2024-10542

Poc Of CVE-2024-10542 and CVE-2024-10781 Broken Authentication in Spam protection, AntiSpam, FireWall by CleanTalk Plugin = 6.43.2 Disclaimer: The information provided in this document regarding for CVE-2024-10542 is for learning and educational purposes only. We do not encourage or authorize the...

ClearML-CVE-2024-24590-RCE

Clearml-CVE-2024-24590 CVE-2024-24590 is a vulnerability that can be exploited when there is improper deserialization on the server side, in this case, Clearml. When an attacker creates a malicious Pickle file, they can execute arbitrary code on the victim who deserializes the Pickle file, which...

CVE-2026-113181

A flaw was found in the Navigation component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to open a specially crafted web page. The issue stems from a use-after-free condition, which occurs when the application...