FreePBX-CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exploit chaining two FreePBX vulnerabilities to go from zero access to remote code execution on FreePBX 16. CVE| Component| Impact ---|---|--- CVE-2025-57819| Endpoint module loader brand parameter| Unauthenticated stacked SQL injection...

CVE-2023-27524-POC

CVE-2023-27524: Apache Superset Auth Bypass Script to check if an Apache Superset server is vulnerable to CVE-2023-27524 and if it is vulnerable then, forge a session cookie with the userid = 1 which is usually the admin user allowing for authentication bypass and gaining access to the dashboard...

CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Authenticated Subscriber+ Arbitrary File Upload Description The Import Export For WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.5. This makes...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

Microsoft-Word-CVE-2017-0199-

Microsoft-Word-CVE-2017-0199- Description: Microsoft Word CVE-2017-0199 is prone to a RCE trough a HTA Handler A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on...

React-Server-Components-RCE

React Server Components Remote RCE Exploitation Tool 📖 Tool Introduction React Server Components Remote RCE Exploitation Tool is a security testing tool specifically designed for remote code execution vulnerabilities in React Server Components and Next.js frameworks. It provides a graphical user...

CVE-2022-22954

CVE-2022-22954 VMware Workspace ONE Access Remote Code Execution Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

RCE-Exploit-Framework

RCE-Exploit-Framework This framework is designed to assist penetration testers or developers in understanding the mechanics of remote code execution RCE exploitation. Features Payload Generator : Supports the creation of custom payloads based on Python, Bash, and PHP. Exploit Executor : Delivers...

CVE-2018-6574-go-get-RCE

This repository does not have a README...

CVE-2018-6574

CVE-2018-6574 CVE-2018-6574 go get RCE...

CVE-2025-53694-to-CVE-2025-53691

Sitecore CVE Chain Exploits This repository contains proof-of-concept exploits for a critical vulnerability chain in Sitecore Experience Platform XP versions up to 10.4.1. Vulnerabilities CVE-2025-53694: Information Disclosure CVE-2025-53693: Cache Poisoning CVE-2025-53691: Remote Code Execution...

CVE-2025-59528

Version francaise CVE-2025-59528 Proof of Concept Minimal PoC focused on technical validation of the vulnerability in an authorized environment. Prerequisites You must have a user account on the target Flowise dashboard. You must have a valid API key linked to that account. You must start a...

wp2shell-poc2

wp2shell-poc Proof-of-concept for an unauthenticated SQL injection in WordPress core that chains to remote code execution, via REST batch route confusion CVE-2026-63030. The exploit needs no credentials and no configuration beyond a reachable target. It reaches the injection through a single...

CVE-2026-49952

setup pip3 install Pillow torch torchvision run $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX | +----------------------------------------------------+ + Getting authcode for DB export +...

LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320

🧠 LetsDefend SharePoint Zero-Day Analysis ToolShell - SOC342-CVE-2025-53770 📘 Introduction I investigated a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend cyber lab. The exercise mimicked a real-world zero-day RCE attack where a malicious POST request bypassed authenticatio...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

running-CVE-2024-32002-locally-for-tesing

We are adapting this for local use we follow this blog post but with some key differences https://amalmurali.me/posts/git-rce How It Works 1. A malicious repository gitrce includes a submodule with a specially crafted path. 2. The submodule path uses a case variation that exploits the...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Interactive shell HTTP hijack + POST + AES-256-CBC/BASE64 Detection -dnslog DNSLog No-Output Detection Nuclei -poc Vulnerability Echo Detection Exploitation -exp Interactive shell base64 echo -exp2 Interactive shell HTTP hijack + POST + Base64 -exp3...