CVE-2026-39808

CVE-2026-39808 On November 2025, a critical vulnerability was discovered on Fortinet's FortiSandbox which allowed an unauthenticated attacker to execute commands in the underlying OS as root. The vulnerability was patched and finally made public on April 2026. This vulnerability affects...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit Module Overview This is a Metasploit module for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This module is designed to serve as a clean, minimal, and...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

CVE-2019-16759

CVE-2019-16759 Vbulletin RCE Exploits...

SpringCloudFunction-Research

SpringCloudFunction-Research CVE-2022-22963 research Environment vulfocus/spring-cloud-function-rce:latest Cause Parsing issue of the spring.cloud.function.routing-expression parameter in the Request Header, leading to injection Payload attacks. Reference...

CVE-2022-21350

Why two POCs? One with com.51pwn.hktalent.CreatJar.mainargs; is used to create the minimal payload generation tool. After creation, use the other one. Running CVE-2022-21350powerBy51pwn.jar to build the payload, errors do not affect the use of the payload. other exp CVE20202551 CVE20202555...

CVE-2019-6340

CVE-2019-6340 For educational purposes only Run $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 Exploit GET $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...

CVE-2021-34527

PrintNightmare CVE-2021-34527 This version of the PrintNightmare exploit is based on the code created by Cube0x0, with the following features: Ability to target multiple hosts. Built-in SMB server for payload delivery, removing the need for open file shares. Exploit includes both MS-RPRN & MS-PAR...

firewall

🛡️ Spring4Shell Firewall Defense – Cybersecurity Incident Simulation This project is part of a Cybersecurity Job Simulation I completed through Forage in August 2025. It simulates a real-world incident involving the Spring4Shell CVE-2022-22965 vulnerability and demonstrates how a custom firewall...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2021-44228_Example

CVE-2021-44228Example Run each of the 3 sections in a spearate tab/console marshalsec LDAP server https://github.com/chilliwebs/marshalsec Forked from https://github.com/mbechler/marshalsec docker build -t marshalsec marshalsec/. docker run -it --rm -p 1389:1389...

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

CVE-2021-35215

CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView Deserialization RCE, requires login. PoC POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests: 1 DNT: 1...

nginxhack

This is a tool that uses an exploit called CVE-2013-2028 to excecute a bind shell on the target server that's running Nginx 1.3.9 or 1.4.0. It can be downloaded here you will need to run it from the command line Usage: nginxhack target target port target bind port...

CVE-2020-7931

CVE-2020-7931: SSTI exploitation in Artifactory Pro CVE-2020-7931 is somewhat of a purposeful misconfiguration vulnerability in Artifactory that lets attackers conduct server-side template injections from a FreeMarker template. The vulnerability was discovered by Ryan Hanson from Atredis and was...

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Weak Password Requirement in admin-center lead to malicious plugin upload in the i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to weak password requirement vulnerability in admin-center + malicious plugin upload lead to RCE vulnerability. These vulnerabilities...

0-click-RCE-Exploit-for-CVE-2024-10924

CVE-2024-10924 / Auth Bypass 2FA to RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859061671852909055 This repository contains a proof-of-concept exploit for CVE-2024-10924, an authentication and 2FA bypass vulnerability in the Really Simple Security WordPress plugin tha...

AirBorne-PoC

AirBorne PoC Framework – Elite RCE Edition Full PoC Framework for CVE-2025-24252 & CVE-2025-24132 By ekomsSavior | AirBorne is a combined proof-of-concept PoC framework targeting two serious vulnerabilities in Apple's AirPlay service. It includes a full crash trigger and a working reverse shell...

cve-2020-29007

CVEID : CVE-2020-29007 Name of the affected products and versions : Mediawiki Score all versions up to 0.3.0 Problem type : CWE-96: Improper Neutralization of Directives in Statically Saved Code ‘Static Code Injection’ Summary Score is a Mediawiki extension which generates musical notation based ...

uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js Introduction All content below refers to the UC Browser exploit explored in this article posted by Interrupt Labs. Getting Started This exploit relates to previous versions of the UC Browser that include the RCE bug of CVE-2022-1364. This bug was patched in the UC browser in...