full-poc-CVE-2025_21298

Review of the CVE-2025-21298 vulnerability CVE-2025-21298 is a critical vulnerability in the OLE Object Linking and Embedding technology used in Microsoft Windows. It specifically affects the UtOlePresStmToContentsStm function in the ole32.dll library. This function is responsible for converting ...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage echo "+-------------------For-The-Help-------------------------------------+"; echo "Example1:...

CVE-2017-9833

CVE-2017-9833 Reference: https://www.cvedetails.com/cve/CVE-2017-9833/ Shodan dork: product:"Boa Web Server" 0.94.14rc21 Payload: /cgi-bin/wapopen/?FILECAMERA=../../etc/shadow POC:...

CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...

CVE-2023-40924

BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: Attacker exploit the vulnerability through downloader.php? The file parameter reads sensitive files through the directory pass. downloader.php?file...

CVE-2026-49952

setup pip3 install Pillow torch torchvision run $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX | +----------------------------------------------------+ + Getting authcode for DB export +...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....

Cve-2025-8088-WinRar-vulnerability

Cve-2025-8088 WinRAR Python tool that creates a malicious RAR file to exploit the CVE-2025-8088 vulnerability in WinRAR. The CVE-2025-8088 vulnerability allows exploitation of manipulated RAR files to cause path traversal and overwrite arbitrary files on the victim's system. This project is for...

chamilo-lms-unauthenticated-big-upload-rce-poc

Chamilo LMS Unauthenticated Big Upload File RCE PoC This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220. The system is vulnerable in versions preceding 1.11.24. Usage Clone the repository to your machine and instal...

CVE-2022-39838

CVE-2022-39838 Suggested description Systematica FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames. Additional Information PoC:...

CVE-2025-66516-POC

⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educational/Authorized Testing Only | License | Security Policy About This POC This repository contains a proof-of-concept POC exploit for CVE-2025-66516 , an XML External Entity XXE injection vulnerability in Apache Tika versions prior to 3.2.2. The vulnerability...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Polyglot Payload In the last weeks in November 2025, an interesting vulnerability CVE-2025-64512 was disclosed in pdfminer.six, a popular Python project to process PDF files, used in particular in AI pipelines. The vulnerability enables remote code execution by deserializing...

CVE-2025-0411-PoC

更多PoCs at: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Compile with MinGW-w64 x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static After compilation, compress the exe with 7z and execute twice. Since this vulnerability requires user interaction, the generated compressed file needs...

CVE-2026-81858

IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1) are vulnerable to an out-of-bounds read in the File Server component. This vulnerability could allow a remote authenticated attacker to cause a denial of service and obtain information. Remediation is available via specific PTFs: SJ11622 for versio...

CVE-2026-81858 IBM i is Affected By A Denial of Service Vulnerability in Host Servers

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

CVE-2024-3094-XZ-Backdoor-Detector

Description Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific...

cve-2020-25540

ThinkAdmin Unauthorized Directory Listing/Arbitrary File Read cve-2020-25540 Usage python3 cve-2020-25540.py url...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution RCE Exploit Simulator Demo Screenshot Simulator interface demonstrating the exploit chain 📌 Overview This repository contains an educational simulation of CVE-2025-30065, a critical Remote Code Execution vulnerability in Apache Parquet...

CVE-2025-4336

eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo...