CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

ownCloud_RCE_CVE-2013-0303

This repository does not have a README...

CVE-2024-25292

RenderTune RCE A Proof-Of-Concept for CVE-2024-25292 vulnerability. A cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter. In this repository there is an example...

CVE-2026-30225-OliveTin-RCE

OliveTin — unauthenticated action execution → RCE + CVE-2026-30225 PoC for privilege escalation / remote code execution against OliveTin instances that run with the shipped guest defaults. Verified against OliveTin 3000.10.0 running as root HTB: Enigma, where it yields an unauthenticated root...

cve-2025-24893-poc

CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-24893 , a critical unauthenticated Remote Code Execution vulnerability in XWiki. This exploit abuses a Groovy template injection in the SolrSearch endpoint to execute arbitrary commands — including reverse shells...

Shellshock_CVE-2014-6271

Shellshock CVE-2014-6271 Shellshock docker-compose.yml, poc.py 파일을 다운 받아 주세요 반드시 pip install requests 를 통해 requests 라이브러리를 다운받아 주세요!!! uv를 사용하시는 분들은 uv를 통해 requests 라이브러리를 venv 안에 넣어주세요!!! CVE Official Description --- In GNU Bash versions prior to 4.3, there was a problem with handling strings th...

Adobe_ColdFusion_RCE_Unauthenticated

CVE-2023-26360 — Adobe ColdFusion Unauthenticated RCE Python implementation of the remote code execution exploit for CVE-2023-26360, based on analysis of the original Metasploit module and the prior work by jakabakos. Why this exists The jakabakos PoC attempts to inject directly into the variable...

CVE-2015-1635-POC

CVE-2015-1635-POC MS15-034 HTTP.sys 远程执行代码检测脚本（MS15-034 HTTP.sys remote execution code poc script） 代码第7行处放置检测的IP，然后运行： python CVE-2015-1635-POC.py Place the detected IP on the seventh line of code and run: python CVE-2015-1635-POC.py...

CVE-2010-2075

CVE-2010-2075 - UnrealIRCd 3.2.8.1 Backdoor Bash PoC Description Bash PoC for the backdoor introduced in the UnrealIRCd 3.2.8.1 source tarball. The compromised binary executes arbitrary commands prefixed with AB; sent to the IRC port. Usage chmod +x exploit.sh ./exploit.sh Example: ./exploit.sh...

CVE-2024-4040

CVE-2024-4040 PoC Python exploit for CVE-2024-4040 Description A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass...

check-react-rce-cve-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. 🚨 Overview This tool scans your project for vulnerable versions of React, Next.js, and...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

CVE-2025-58434-59528-htb-ctf

CVE-2025-58434-59528-htb-ctf Silentium Exploit Chain This repository contains the complete exploitation chain for the Silentium machine on Hack The Box. The exploit leverages a two-stage vulnerability involving user enumeration and JavaScript injection to achieve Remote Code Execution RCE. 📝...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload Visit https://phankz.com...

cve-disclosures

CVE Disclosures — Aman Bahiniya Three CVEs assigned by MITRE in December 2024. The records were reserved but never published, so nothing is indexed yet. This repo publishes the advisories so the CVEs become searchable and credited. CVE| Product| Type ---|---|--- CVE-2024-57551| Online Food Orderi...

CVE-2025-13486

Mass Exploit CVE-2025-13486 Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepareform ⚠️ Vulnerability Details The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via th...

r2s

React2Shell R2S - CVE-2025-55182 Testing Tool Advanced exploitation testing tool for CVE-2025-55182 vulnerability assessment Features • Installation • Usage • Testing Environment • Legal 📖 What is R2S? R2S React2Shell is a security testing tool designed to help security researchers, developers, a...

CVE-2026-32475

CVE-2026-32475 PoC : Elementor Pro Unauthenticated Arbitrary File Upload to RCE Elementor Pro Pre-Authentication Arbitrary File Upload Leading to Remote Code Execution Proof-of-concept for CVE-2026-32475, a critical unauthenticated arbitrary file upload in Elementor Pro's Forms module that ends i...

CVE-2026-75865

CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 Proof-of-concept and technical write-up for CVE-2026-75865 , an unauthenticated arbitrary file upload leading to remote code execution in the WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent...