330116 matches found
CVE-2025-57819-exploit
CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one exploit for CVE-2025-57819 , an unauthenticated SQL injection in FreePBX's endpoint module that leads to remote code execution via cron job injection. CVSS : 9.8 Critical — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : Added...
React2Shell-CVE-2025-55182
CVE-2025-55182 - React2Shell | | | / \ / | | / || | | | | | | | | | | | / | | | | \ | || | | | | | | | | | / \ | | | / / | | || || | || \// \| || ||/|| ||||| CVE-2025-55182 Remote Code Execution Scanner for React Server Components RSC Credits Role| Name| Link ---|---|--- Original Research|...
CVE-2023-46604
Technical Summary of the Attack: CVE-2023-46604 The script exploits an insecure deserialization vulnerability in Apache ActiveMQ CVE-2023-46604 to achieve remote code execution on the target server. Description of the Exploitation Process Vulnerability Target: The vulnerability resides in the...
CVE-2023-27524
CVE-2023-27524 Insecure Default Configuration in Apache Superset Leads to Remote Code Execution Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with $ git clone https://github.com/Pari-Malam/CVE-2023-27524 $ cd CVE-2023-27524 $ pip/pip3 install -r requirements.txt $...
CVE-2024-38856-ApacheOfBiz
CVE-2024-38856-ApacheOfBiz Apache OFBiz is an open source enterprise resource planning system. It provides a suite of enterprise applications that integrate and automate many of the business processes of an enterprise. CVE-2024-38856 is a pre-authentication flaw in Apache OFBiz that can lead to...
SQLPad-RCE-Exploit-CVE-2022-0944
How It Works: This PHP code is designed to exploit a Remote Code Execution RCE vulnerability in SQLPad , related to CVE-2022-0944. It works by injecting malicious code into the SQLPad application, forcing it to execute a system command that opens a reverse shell – a connection that grants the...
cve-2025-57819
🛡️ FreePBX Hunter - CVE-2025-57819 🛡️ A powerful Nuclei toolkit for detecting and validating the critical FreePBX authentication bypass vulnerability. 📖 Table of Contents Click to expand About This Project Key Features Vulnerability Breakdown Templates in Action Finding Targets with Shodan Legal...
CVE-2022-30190
CVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote code...
Vulnerable-Lab-Exploitation
Vulnerable-Lab-Exploitation A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823. Vulnerable Lab Setup & PHP CGI Exploitation CVE-2012-1823 🎯 Project Overview This project demonstrates the creation of an isolated virtual lab...
CVE-2019-9202
CVE-2019-9202 Nagios IM 2.6 remote code execution exploit: CSRF + SQLi + RCE + LPE -- remote root Description By chaining a Cross-Site Request Forgery CSRF / authorization bypass CVE-2019-9203 it is possible to exploit a Union-based SQL injection CVE-2019-9204, a Remote Code Execution RCE...
CVE-2020-14882
CVE-2020-14882 CVE-2020–14882 - research by Jang Code by @s1kr10s Poc: POST Review / Video: https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf https://www.youtube.com/watch?v=JFVDOIL0YtA&feature=youtu.be...
CVE-2025-55182-in-go
CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage go run main.go -t -c Examples go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t http://127.0.0.1 -c "cat /etc/passwd"...
CVE-2013-4710-WebView-RCE-Vulnerability
CVE-2013-4710-WebView-RCE-Vulnerability Vulnerability Description A lot of the time we use WebView to display a Webpage,for example many applications in order to achieve the server control, many results page is Webpage, rather than the local implementation, which has many advantages, such as...
CVE-2021-26700
RCE in NPM VSCode Extension Fixed 10th February 2021 in https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 Summary Remote code execution vulnerability in the eg2.vscode-npm-script...
CVE-2020-5902-fofa-scan
CVE-2020-5902-fofa-scan Introduction F5 BIG-IP Remote Code Execution Vulnerability CVE-2020-5902, fofa scan script Prerequisites Fofa membership, fill in the value of fofaproarssession. Modify the keyword value on line 12 yourself. Modify the page number range on line 17 yourself. The methods and...
CVE-2026-4885
CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...
CVE-2023-6553-PoC
CVE-2023-6553 PoC LFI to RCE Unauthenticated Remote Code Execution in Backup Migration WordPress Plugin. Run $ python exploit.py The following PHP script is executed. out.txt; ? References Critical Unauthenticated Remote Code Execution Found in Backup Migration Plugin...
CVE-2025-47812-poc
CVE-2025-47812 Wing FTP Server Remote Code Execution RCE Exploit CVE-2025-47812 📌 Credit : Vulnerability discovered by Julien @MrTuxracer. This PoC implementation is based on their original research. This repository hosts a Python exploit for the Wing FTP Server Remote Code Execution RCE...
CVE-2025-7401
CVE-2025-7401 Premium Age Verification / Restriction for WordPress = 3.0.2 - Unauthenticated Arbitrary File Read and Write 🧾 Premium Age Verification / Restriction for WordPress = 3.0.2 — Unauthenticated Arbitrary File Read & Write 📝 Description The "Premium Age Verification / Restriction for...