CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105 API curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Output: Attack curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Output: Logs: Reference: https://vulners.com/cve/CVE-2021-45105...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...

cve-2017-9805.py

CVE-2017-9805.py 1. Better Exploit Code For CVE 2017 9805 apache struts 2. Should be mostly error proof Why Recode? Found that most of the exploit code online simply used string concatenation to insert user supplied commands and insert into an XML string. This isnt very reliable as XML requires...

CVE-2025-55182-scanner

React Server Components Surface Exposure Scanner CVE-2025-55182 A specialized, non-intrusive surface detector for CVE-2025-55182 React Server Components RCE. ⚠️ Critical Technical Context Read this before scanning: While CVE-2025-55182 is a critical RCE vulnerability CVSS 10.0, real-world...

spring-core-rce

Spring Core RCE/CVE-2022-22965 Affected scope: Spring framework and derivative frameworks with JDK=9 Reference article This script is for learning purposes only. Any legal liability arising from its use for other purposes is solely the responsibility of the user, not the author. 1. Installation...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC LINK https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ RUN go get github.com/neargle/CVE-2018-6574-POC DETAIL payload at: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Now it supports all platforms using CGO features. Afte...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own o...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE CVE-2025-0282 This is purposefully broken in non-trivial ways and will require effort to work as outlined previously in our exploitation technique blogpost. To understand this vulnerability, you can take a look at our technic...

CVE-2022-21907-Vulnerability-PoC

CVE-2022-21907 Description - POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. - create by antx at 2022-01-17, just some small fixes by Michele "[email protected]" Detail - HTTP Protocol Stack Remote Code Execution Vulnerability. - Similar to...

CVE-2021-44228

CVE-2021-44228 Analysis How does it work? Below is a detailed process of a remote injection case by exploiting log4shell vulnerability. First, there are 3 part we need to know: 1. Log4j2 allows for the logging of data using a feature called message lookup substitution , where log messages can...

CVE-2023-34040

CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36...

Log4J-RCE-Proof-Of-Concept

Log4J-RCE-Proof-Of-Concept CVE-2021-44228 This is a proof of concept of the log4j rce. Here are some links for the CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day https://github.com/advisories/GHSA-jfh8-c2jp-5v3q https://github.com/apache/logging-log4j2/pull/608...

CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 Description This vulnerability allows arbitrary command execution on systems running Apache Unomi version 1.5.1, by exploiting MVEL expression language injection. Project Page GitHub - Vulhub - Unomi CVE-2020-139...

Deep-Reaver

Deep Reaver Deep Reaver is a powerful, AI-enhanced vulnerability assessment and exploitation toolkit built in Python. Inspired by tools like Nmap and Nessus, Deep Reaver is designed for deep, modular scanning of web applications and services. Features AI-assisted analysis via aiassistant.py Modul...

frigate

Frigate NVR™ - Realtime Object Detection for IP Cameras English | 简体中文 A complete and local NVR designed for Home Assistant with AI object detection. Uses OpenCV and Tensorflow to perform realtime object detection locally for IP cameras. Use of a GPU or AI accelerator is highly recommended. AI...

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download git clone...

microsoft-diagcab-rce-poc

microsoft-diagcab-rce-poc Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution You can find the full advisory here: https://medium.com/@radimre83/the-trouble-with-microsofts-troubleshooters-6e32fc80b8bd...

CVE-2024-5452

CVE-2024-5452 01. Overview of RCE and pytorch-lightning 1 Overview of RCE and pytorch-lightning RCE Remote Code Execution is a vulnerability that allows an attacker to execute arbitrary code remotely within a system or application, and is classified as CWE-94: Improper Control of Generation of...