320655 matches found
CVE-2020-11890
Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...
CVE-2023-21716
CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as an email attachment or othe...
cve-2019-0708_bluekeep_rce
Run msfconsole meterpreter/multi/handler listening on 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Edit config, configure callback IP and port 192.168.116.133 6000 4. Execute ./heapspray 192.168.116.134 134 is the XP address, memory = 2G 5. msfconsole meterpreter will get a session ps:...
CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento
CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento CVE-2024-34102 CVE-2024-34102 is a severe security flaw arising from improper handling of nested deserialization in Adobe Commerce and Magento. This vulnerability permits attackers to exploit XML External Entiti...
CVE-2023-50564_Pluck-v4.7.18_PoC
CVE-2023-50564 PoC This repository contains a Proof of Concept for CVE-2023-50564 vulnerability in Pluck CMS version 4.7.18 Description CVE-2023-50564 is a vulnerability that allows unauthorized file uploads in Pluck CMS version 4.7.18. This exploit leverages a flaw in the module installation...
CVE-2024-27348
CVE-2024-27348 šŖ¶ CVE-2024-27348 Proof of concept Exploit RCE in Apache HugeGraph Server Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph Server. Usage š Exploit multiple targets ā£ļø python3 CVE-2024-27348.py -f targets.txt -c "command to execute" Exploit single...
Spring4Shell-POC
Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down Reproduction Process Run...
CVE-2023-33246
CVE-2023-33246 Apache RocketMQ Remote Code Execution CVE-2023-33246 Exploit Usage: java -jar CVE-2023-33246.jar -ip "127.0.0.1" -cmd "open -a calculator" Disclaimer: This detection tool is intended only for security testing by security testers of major security companies. Do not use it to invade ...
CVE-2024-34716
CVE-2024-34716PoC More technical details can be found on https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installation pip install -r requirements.txt Usage Usage: python exploit.py --url --email --local-ip --admin-path...
CVE-2026-0740-mass
CVE-2026-0740 ā Mass-Target Exploit Engine Author: 0xNuts Contributor: Cursor Repository: https://github.com/ExDev994/CVE-2026-0740-mass PoC for CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 ā Unauthenticated Arbitrary File Upload which can lead to RCE. Original vulnerability discovered by SĆ©l...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ā 1 No SQL Injection ā 2 Cross site Scripting ā 3 Broken Access Control ā 4 Broken Session Management ā 5 We...
react2shell-exploit
CVE-2025-55182 ā React2Shell Remote Code Execution in Next.js ā ļø Disclaimer : This documentation is provided for educational and security research purposes only. Any unauthorized use of these techniques against systems you do not own or have explicit permission to test is illegal. š Table of...
NGINX_RIFT_SCAN_CVE_2026_42945
NGINX Rift Config Scanner Language: äøę | English This is a lightweight scanner for checking whether an NGINX configuration contains risky CVE-2026-42945, also known as NGINX Rift, and CVE-2026-9256 configuration patterns. The issue was disclosed by depthfirst in NGINX Rift: Achieving NGINX RCE vi...
CVE-2021-22986
F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...
CVE-2022-22980
CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...
CVE-2022-29464
CVE-2022-29464 WSO2 RCE CVE-2022-29464 Usage ā¢ This exploit can only be run for multi targets python3 exploit.py --file urls.txt References https://github.com/hakivvi/CVE-2022-29464...
CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit š”ļø Description CVE-2026-3891 is a critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0. The vulnerability exists in the lknpixforwoocommercec6savesetting...
CVE-2021-41773_CVE-2021-42013
Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE Exploit Author: Lucas Souza https://ls4ss.github.io/ Vendor Homepage: https://apache.org/ Version: 2.4.49, 2.4.50 Tested on: 2.4.49, 2.4.50 CVE : CVE-2021-41773, CVE-2021-42013 Credits: Ash Daulton and the cPanel Security Team Usage ./PoC.s...
cve-2010-4221-lab
CVE-2010-4221 ā ProFTPD TELNET IAC Stack Overflow: From Patch to RCE A fully reproducible lab and a hand-written, raw-socket exploit for CVE-2010-4221 ā the pre-authentication stack buffer overflow in ProFTPD's prnetiotelnetgets ā built as a learning exercise in vulnerability research and exploit...