Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Remote Code Execution without authentication nexus 关于命令回显： functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character'; integer=1.class; x='...

CVE-2025-55182-exploit

⚠️ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Only test systems you own or have explicit written permission to test Unauthorized use is illegal and unethical The developers assume no liability for misuse Use responsibly and in compliance with all...

CVE-2019-0708-poc

CVE-2019-0708-poc CVE-2019-0708 Remote Code Execution Vulnerability Batch Detection 3389hosts is a list of IP addresses to be detected, one per line pool = ThreadPool10 is a custom scanning thread count Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be detecte...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner A full-featured exploitation utility for CVE-2025-55182 — Remote Code Execution via React Server Components in Next.js. The scanner automatically crafts the multipart payload and abuses process.mainModule.require'childprocess'.execSync to achieve arbitrary OS comma...

cve-2025-3248-exploit

CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability Scanner A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248 , a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0. 🔴 Vulnerability Overview CVE-2025-3248: Langfl...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE Description This repository contains a Python-based Proof of Concept PoC for CVE-2024-28397, a sandbox escape vulnerability in the Js2Py JavaScript interpreter for Python. When the target application evaluates untrusted JS code via Js2Py, an attacker can break out of the...

CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authenticated Command Injection in Configuration Wizard Simple proof of concept repository for CVE-2025-34227, an authenticated command injection in Nagios XI - Configuration Wizard Full writeup here: https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/...

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE Authenticated Exploit for the Remote Code Execution vulnerability in Webmin versions prior to 1.997, through the Software Package Updates module. How does it work? The Webmin Software Package Updates module does not properly sanitize the u parameter before passin...

CVE-2019-11043

CVE-2019-11043 php-fpm+Nginx RCE 0x01 install phuip-fpizdam-Mac go get github.com/neex/phuip-fpizdam go install github.com/neex/phuip-fpizdam ale@Pentest /go go get github.com/neex/phuip-fpizdam ale@Pentest /go go install github.com/neex/phuip-fpizdam ale@Pentest /go ls bin src ale@Pentest /go cd...

CVE-2020-17530

CVE-2020-17530 s2-061 poc:...

CVE-2024-44902-env

CVE-2024-44902 - ThinkPHP Insecure Deserialization RCE Vulnerable environment for nuclei-templates validation. Vulnerability Details Field| Value ---|--- CVE ID| CVE-2024-44902 Severity| Critical CVSS 9.8 Product| ThinkPHP Affected Versions| 6.1.3 - 8.0.4 Type| Insecure Deserialization → RCE CWE|...

CVE-2026-Pending-Django-Summernote-RCE

CVE-2026-XXXXX Pending: django-summernote Arbitrary File Upload RCE This repository contains a Proof of Concept PoC for a Conditional Remote Code Execution RCE vulnerability discovered in django-summernote version 0.8.20.0 and earlier. Vulnerability Details Product : django-summernote Version : =...

CVE-2025-67435-PoC

CVE-2025-67435 Researcher : Chowdhury Faizal Ahammed PluckCMS Zip Slip Remote Code Execution Vulnerability Report Executive Summary This report documents a critical security vulnerability discovered in PluckCMS that allows authenticated attackers to achieve remote code execution through a Zip Sli...

react-rce

CVE-2025-55182 React2Shell Vulnerability Lab AI Used: Claude Opus 4.5 ⚠️ Warning : This environment is for educational and research purposes only. Vulnerability Overview Item| Description ---|--- CVE| CVE-2025-55182 React / CVE-2025-66478 Next.js Name| React2Shell CVSS| 10.0 Critical Type| Pre-Aut...

watchTowr-vs-FortiWeb-CVE-2025-25257

watchTowr-vs-FortiWeb-CVE-2025-25257 Detection Artifact Generator for FortiWeb CVE-2025-25257 See our blog post for technical details https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Detection in Action python watchTowr-vs-FortiWeb-CVE-2025-25257.py --target...

CVE-2025-27520

CVE-2025-27520 exploit for CVE-2025-27520 A Remote Code Execution RCE vulnerability caused by insecure deserialization in the latest version v1.4.2 of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic unauthorized access leading to arbitrary file upload/RCE vulnerability check script...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php80/php80-8.0.30-i586-2slack15.0.txz: Rebuilt. This update fixes the following critical remote code execution flaw: Avoid state corruption via...