CVE-2023-33733

CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl;dr This write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

CVE-2025-49596-PoC

CVE-2026-23744-PoC Automated PoC for CVE-2026-23744 RCE on MCPJam inspector prior to 1.4.2 on linux targets How to use use netcat to run listener on any port like 9002. nc -nvlp 9002 use the automation like this python3 CVE-2025-49596.py https://mcpjam-server.com...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel Proof of concept for CVE-2020-11819 and CVE-2020-15946. Tested on Rukovoditel 2.4.x, 2.5.x and 2.6.1 Description: This exploit has two modes of execution, using the session fixation vulnerability CVE-2020-15946 or using the access credentials of any account under any profile...

CVE-2022-29078

CVE-2022-29078 Simple PoC for CVE-2022-29078 vuln ejs 3.1.6 Usage git clone https://github.com/chuckdu21/CVE-2022-29078.git cd CVE-2022-29078 python3 CVE-2022-29078.py A prompt will appear to execute commands $ id uid=0root gid=0root groupes=0root...

cve-2022-22947-spring-cloud-gateway

Vulnerability Overview Spring Cloud Gateway is a new project under Spring Cloud, built on Spring 5.0, Spring Boot 2.0, and Project Reactor. It aims to provide a simple and effective unified API routing management method for microservice architectures. Recently, Spring Cloud Gateway was reported t...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Usage: python3 cve-2024-29895.py -u https://target.com/ -c id Affecting Cacti versions 1.3.X on DEV builds where cmdrealtime.php is present and POLLERID is enabled. Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query...

CVE-2023-38831_ReverseShell_Winrar-RCE

OBTAINING A REVERSE SHELL BY EXPLOITING THE WINRAR VULNERABILITY CVE-2023-38831 In this repository we are going to exploit the WinRAR vulnerability CVE-2023-38831 in order to obtain a reverse shell from the victim Windows machine to the attacker Kali Linux machine. PRELIMINARY STEPS Download the...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...

cve-2019-14540-exploit

CVE-2019-14540 Exploit http://www.leadroyal.cn/?p=939 Environment limitation: This demo uses the jndi ldap exploitation method, so a low version less than 8u191 of the jdk is required. 1. Use marshalsec to create an ldap service on local port 1389, pointing to the http service on local port 8000...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...

CVE-2019-5475-Nexus-Repository-Manager-

CVE-2019-5475-Nexus-Repository-Manager- Payload PUT /nexus/service/siesta/capabilities/xxxxxxxxx HTTP/1.1 Host: xxxx.xxxx.com User-Agent: Accept: application/json,application/vnd.siesta-error-v1+json,application/vnd.siesta-validation-errors-v1+json Accept-Language:...

FUDforum-XSS-RCE

FUDforum-XSS-RCE FUDForum 3.0.9 - XSS / Remote Code Execution CVE-2019-18873, CVE-2019-18839 Multiple Stored XSS vulnerabilities have been found in FUDforum 3.0.9 that can result in remote code execution. Stored XSS via username in forum: Info | Demo Stored XSS via useragent in admin panel: Info ...

CVE-2021-44228-PoC

CVE-2021-44228 Log4Shell Proof of Concept Apache Log4j2 =2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute...

CVE-2024-20696

libarchive-harness-win - CVE-2024-20696 Blog post: https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/ A simple test harness for CVE-2024-20696 1. Download a version of archiveint.dll that you want to test 2. Update the path here 3. Update the file pa...

nmap-spring4shell

Nmap-spring4shell Log4shell-nmap is an NSE script for detecting Spring4Shell RCE vulnerabilities CVE-2022-22965 in HTTP services. The script injects the correct payload into the application and then executes the following command on the specified endpoint. Vulnerability See here. Usage...

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apache HTTP Server Exploited On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the mo...