CVE-2021-43936

CVE-2021-43936 CVE-2021-43936 is a critical vulnerability CVSS3 10.0 leading to Remote Code Execution RCE in WebHMI Firmware. This vulnerability works on versions 4.0 and the newest ones. Tested only on 4.0.7475. Vulnerability is used by script in the following steps: 1. Logs into the application...

CSPOC

Cobalt Strike Stored XSS RCE CVE-2022-39197 Runtime Parameters: -u: Cobaltstrike HTTP listener address, e.g., http://127.0.0.1:8500 -p: Payload, e.g., should not be too long Demonstration: Build command: go build -ldflags "-s -w" QQ Group: Click to join: 528118163 Join group / Cooperation / Conta...

CVE-2018-2893

CVE-2018-2893 Weblogic CVE-2018-2893 Enjoy 测试环境-Docker The Docker In Here! https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.md Ps: 由于外网有RMI远程服务器，很方便弹到shell; 如果在内网，你需要指定自己的RMI服务器，不然无法获取到反弹Shell !!! 0x01 generate-payload 0x02 send-payload Payload:...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...

joomla_rce_CVE-2015-8562

joomlarceCVE-2015-8562 All versions of the Joomla! below 3.4.6 are known to be vulnerable. But exploitation is possible with PHP versions below 5.5.29, 5.6.13 and below 5.5. Démo : https://www.youtube.com/watch?v=twqYpn1ir4o...

CVE-2020-24186-wpDiscuz-7.0.4-RCE

POC CVE-2020-24186-wpDiscuz-7.0.4-RCE WordPress wpDiscuz 7.0.4 Remote Code Execution A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the...

git_rce

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

RP_Import_RCE

Real Player 'external::Import' Arbitrary file download, Directory Traversal Vulnerabilities leads to Remote Code Execution video demo: https://youtu.be/CONlijEgDLc Real Player uses Microsoft Internet Explorer functionality and exposes properties and methods through a special mean which is...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Remote Code Execution Vulnerability Video demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control component contains a remote code execution vulnerability because it allows 'javascript:' URIs to be passed as the argument, which is...

CVE-2020-0688

CVE-2020-0688 A remote code execution vulnerability exists in Microsoft Exchange Server when the server fails to properly create unique keys at install time. Knowledge of a the validation key allows an authenticated user with a mailbox to pass arbitrary objects to be deserialized by the web...

CVE-2023-38831_ReverseShell_Winrar-RCE

OBTAINING A REVERSE SHELL BY EXPLOITING THE WINRAR VULNERABILITY CVE-2023-38831 In this repository we are going to exploit the WinRAR vulnerability CVE-2023-38831 in order to obtain a reverse shell from the victim Windows machine to the attacker Kali Linux machine. PRELIMINARY STEPS Download the...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...

RP_DCP_Code_Exec

Real Player 'DCP://' URI Remote Arbitrary Code Execution Vulnerability video demo: https://youtu.be/AMODp3iTnqY The 'DCP://' URI scheme is an internal protocol used by Real Player to retrieve URLs to display in the Player browser tab. It stands for 'Data Cache Protocol'. It will retrieve files fr...

CVE-2024-32113

CVE-2024-32113 Apache OFBIZ Path traversal leading to RCE EXP. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.14not include. Users are recommended to upgrade to version 18.12.14 , which fixes...

CVE-2022-26134

CVE-2022-26134 Confluence Pre-Auth Object-Graph Navigation Language OGNL Injection Confluence is a web-based workspace collaboration product that is developed by Atlassian. It can be deployed on-prem or as part of Atlassian Cloud. It consists of 3 key features: page, space and page tree. Page: Yo...

hook

hook submodule for gitrce: https://github.com/EQSTSeminar/gitrce Attack Scenario kali192.168.216.129 --Give remote repository address-- Win192.168.216.130 kali192.168.216.129 --Git clone && hook scriptpost-checkout execution-- Win192.168.216.130 Disclaimer This repository is not intended to be gi...

CVE-2024-53677

This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit nofile=122880:122880 -m 3G...

bigip-scanner

BIG-IP Scanner Determine the running software version of a remote F5 BIG-IP management interface. Developed with ❤️ by the Bishop Fox Cosmos team. Description CVE-2022-1388, a critical vulnerability in the F5 BIG-IP management interface, allows an attacker to bypass authentication and remotely...