CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Technical Analysis A technical root cause analysis of the vulnerability, indicators of compromise, and internet exposure can be found on our blog: https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2025-55182_PoC-Test-Server

CVE-2025-55182PoC-Test-Server CVE-2025-55182 React RCE Test Server...

CVE-2023-34362

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE For a full technical description of the vulnerability and exploitation, please read our AttackerKB Analysis. Usage ruby CVE-2023-34362.rb Note: The deserialization gadget is configured to spawn 'notepad.exe'. Example ruby poc-cve-2023-34362.rb...

ciscoasa_honeypot

Cisco ASA honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Contact: [email protected] A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability It is released under the MIT license for the use of the...

jackson-CVE-2020-8840

CVE-2020-8840 FasterXML/jackson-databind Remote Code Execution Vulnerability...

mcp-pwn

CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution Summary MCPJam is an open-source MCP Model Context Protocol inspector and proxy used to connect, debug, and manage MCP servers. Versions = 1.4.3 Attack Vector| Network — No Authentication Required Disclosure| 2026-01-15 Technical...

cve-2019-6453-poc

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument list, an attacker is...

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 References respect to the masters: CVE-2023-50386 vulnerability author's blog Java Security Manager Bypass Techniques Bypassing Reflection Protection in JDK 17 JNI Bypassing RASP Vulnerability exploitation...

CVE-2025-49132-PHP-PEAR

CVE-2025-49132: Pterodactyl Panel Unauthenticated RCE via PHP PEAR Method Table of Contents Overview Vulnerability Details Technical Analysis Exploit Flow Installation Usage Examples Mitigation Disclaimer References Author Overview This repository contains a proof-of-concept PoC exploit for...

Exchange2domain

Exchange2domain All in One tools of privexchange . You only need to open the web server port, so no high privileges are required. Great writeup! Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket...

CVE-2015-9331

CVE-2015-9331 POC Vulnerability Description CVE-2015-9331 is an arbitrary file upload vulnerability in the WordPress plugin WP All Import. This vulnerability allows an unauthenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution. Affected Versions...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

dockerevil

dockerevil A simple repository to store my security flaws in the docker technology 2016 - 2017 Docker API Privilege EscalationLPE/RPE Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile Docker SUDO Privilege Escalation PoC Nmap Scripts 2019 CodeStudent1995 Based Exploit OpenShif...

CVE-2025-49113-exploit

CVE-2025-49113 - Roundcube Remote Code Execution A proof-of-concept exploit for CVE-2025-49113, a remote code execution vulnerability in Roundcube Webmail. Description This exploit targets a deserialization vulnerability in Roundcube Webmail versions 1.5.0 through 1.6.10. The vulnerability allows...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...

n8n-cve-2026-21858

n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — n8n unauthenticated file read to RCE exploit...

CVE-2014-6271-Shellshock-

Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demonstration Lab Shellshock CVE-2014-6271 is one of the most influential remote code execution vulnerabilities ever discovered. The flaw affects Bash and allows attackers to execute arbitrary commands simply by injecting crafted payloads in...

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to RCE Overview CVE-2024-50330 is a critical pre-authentication SQL injection vulnerability in Ivanti Endpoint Manager EPM that allows a remote unauthenticated attacker to achieve remote code execution on the target server. The vulnerabili...

CVE-2018-14324-Exploit

Hacking Eclipse GlassFish - CVE-2018-14324 The description of CVE-2018-14324 does not fully explain the impact of this vulnerability. TLDR you have access to Java Management Extensions JMX via hardcoded admin:admin creds. While impact is listed as " potentially sensitive information, perform...