327920 matches found
CVE-2026-113019
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free condition in the Turbolev component, where the application references memory...
CVE-2022-30507-PoC
Description remote code execution RCE by executing javascript code - Cross-site-scripting XSSand rendering process by nodeintegration which is responsible for rendering process and accessing node js code PoC Video Reference...
CVE-2026-20841_notepad_analysis
Purpose Investigate the Microsoft Notepad RCE vulnerability CVE-2026-20841, perform binary analysis, and create a PoC exploit for learning purposes. Role Assignment Launch an Agent Team to execute the role assignment I have in mind. Binary Hunter: Collects binaries before and after the patch is...
tplink-CVE-2017-11519
tplink-CVE-2017-11519 POC for TP-Link Archer C9 - Admin Password Reset and RCE CVE-2017-11519 See the writeup at https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...
CVE-2020-14321
Python script to exploit CVE-2020-14321 - Moodle 3.9 Course enrolments allowed privilege escalation from teacher role into manager role to RCE. Teachers of a course were able to assign themselves the manager role within that course. Payload extracted from:...
CVE-2026-113079
A flaw was found in the SiteIsolation component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page, triggering a use-after-free memory error. Successful exploitation allows the attacker to execute arbitrary code within the...
moltbot-1click-rce
This repository does not have a README...
CVE-2022-20607
CVE-2022-20607 In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2026-113200
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563350676...
CVE-2024-32651-changedetection-RCE
CVE-2024-32651 changedetection 0.45.20 - Remote Code Execution RCE Server-Side Template Injection Exploit!! 1. Title Remote Code Execution via Server-Side Template Injection SSTI in Vulnerable Web Application 2. Description This exploit targets a web application vulnerable to Server-Side Template...
httpd-2.4.49
httpd-2.4.49 critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 CVE-2021-42013...
CVE-2022-22965
CVE-2022-22965 Spring4Shell CVE-2022-22965 Usage 1. show info β― go run main.go -s INF VulnInfo: "Name": "CVE-2022-22965", "VulID": "nil", "Version": "1.0", "Author": "", "VulDate": "2022-03-30", "References": "https://nosec.org/home/detail/4983.html" , "AppName": "Spring Core", "AppPowerLink":...
CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover
π― CTT-Mailpit-Exploit: Perfect 11/10 Score Zero-Click Worm Transform a basic SMTP header injection CVE-2026-23829 into a perfect-scoring, self-propagating RCE worm using Convergent Time Theory. π Score Transformation: 6.1 β 11.0/10 β Metric Original CVE-2026-23829 CTT-Enhanced Improvement CVSS...
CVE-2026-113001
A flaw was found in chromium-browser. A use-after-free vulnerability in the Workers component allows a remote attacker to execute arbitrary code inside the browser sandbox. To exploit this flaw, an attacker must trick a user into opening a specially crafted HTML page...
CVE-2024-11393
CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious...
CVE-2025-34085
CVE-2025-34085 β WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....
CVE-2021-4045
TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 π "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" π Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...
EvilVM
EvilVM EvilVM compiler for information security research tools. The project is built around a native code Forth compiler that is deployed as a position independent shellcode. It provides a platform for remote code execution, useful in information security contexts. NolaCon 2019 Presentation I...
CVE-2026-113101
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is due to a use-after-free condition in the SiteIsolation component, which occurs when memory is...
cve-2025-3248
CVE-2025-3248 Langflow RCE Scanner A Python tool for scanning and exploiting the CVE-2025-3248 vulnerability, which allows remote code execution RCE in Langflow applications. Features Single-target scanning and command execution Batch URL scanning Interactive shell mode Multi-threaded batch...