GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

CVE-2025-20029-simulation

🔐 Replayable Attack Simulation – CVE-2025-20029 ⚠️ This repository simulates CVE-2025-20029 in a safe and controlled environment. It does not interact with real F5 BIG-IP systems or exploit any production service. The goal is educational: to study the vulnerability pattern and test payloads safely...

CVE-2021-44827

CVE-2021-44827 A PoC for CVE-2021-44827 - authenticated remote code execution in Tp-link Archer C20i Write-up: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html Example $ python exploit.py error0 error0 Run postexploitcmd Trying 192.168.0.1...

CVE-2021-25076

CVE-2021-25076-Exploit Wordpress Plugin WP User Frontend 3.5.26 - SQL-Injection Authenticated CVE description: The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Server Webwork OGNL injection An OGNL injection vulnerability exists that would allow an authenticated user and in some instances unauthenticated user to execute arbitrary code on a Confluence Server or Data Center instance. IMPORTANT This exploit is only intended to...

CVE-2022-28117

CVE-2022-28117 Navigate CMS = 2.9.4 - Server-Side Request Forgery Authenticated Description A Server-Side Request Forgery SSRF in feedparser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed...

CVE-2019-11447_CuteNews-AvatarUploadRCE

CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Avatar upload RCE Authenticated Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE Authenticated Exploit Links: Expected outcome: Login/Register an account, craft user selected PHP file with .gif magic bytes, uploads the file as an...

CVE-2023-40028

CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email for the target Ghost CMS. --password : The password for the target Ghost CMS. --url : The URL of the target Ghost CMS e.g., http://website.com. 1. Login: The script authenticates with the Ghost CMS admin API and retrieves a session...

CVE-2025-53770-Exploit

📌 SharePoint WebPart Injection Exploit Toolkit 🍕 Exploit tool for SharePoint WebPart Injection via ToolPane.aspx, leading to .NET deserialization and potential remote code execution RCE. Developed by: @GOTOCVE 🌍 Overview This tool exploits a vulnerability in Microsoft SharePoint on-premises that...

POC_CVE-2024-46256

POCCVE-2024-46256 CVE-2024-46256 and CVE-2024-46257 is the same POC, just change the provider param. Note Sometimes the nc file can't execute on the server or can't execute command! Install require pip install requests Run Exploit python3 POCCVE-2024-46256.py + Target type IP/Host? i/h: i + Enter...

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit for SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of...

CVE-2024-53376

CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is required to firstly login to the webpanel. Tested With CyberPanel 2.3.7 Technical details An attacker can...

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵 Authenticated RCE Cacti version v1.2.26 Summary An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code ...

CVE-2022-30075

CVE-2022-30075 Authenticated Remote Code Execution in Tp-Link Routers Affected Devices If your Tp-Link router has backup and restore functionality and firmware is older than june 2022, it is probably vulnerable Tested With Tp-Link Archer AX50, other tplink routers may use different format of...

CVE-2025-25163

CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - Authenticated Subscriber+ Arbitrary File Download Description The Plugin A/B Image Optimizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3. This makes it possible for authenticated attackers,...

CVE-2025-5961

🚨 Migration, Backup, Staging – WPvivid Backup & Migration 📈 This vulnerability affects a plugin with over700,000+ installs 📝 CVE Details CVE: CVE-2025-5961 CVSS: 7.2 High Published: July 3, 2025 🔍 Description The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is...

CVE-2019-14314

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authenticated SQL Injection Usage usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to login with username...

CVE-2022-31101

CVE-2022-31101 Exploit for PrestaShop bockwishlist module 2.1.0 SQLi CVE-2022-31101 Usage python3 cve-2022-31101.py Give the url to the wishlist when prompted. Example of a url: http://example.com/module/blockwishlist/view?idwishlist=1 Give the cookies for your account when prompted. Now it will...

CVE-2007-5962

CVE-2007-5962 1. Introduction My tool is written in Python and exploits the CVE-2007-5962 vulnerability to perform a series of directory changes that crash the ftp daemon. DISCLAIMER!!! Please note that the use of hacking tools without authorization is illegal and could result in legal problems...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had. I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login. After an unholy amount of time I finally figured out...