WebLogic-RCE-exploit

Questo repository non contiene un README...

CVE-2025-24813-POC

CVE-2025-24813 Apache Tomcat RCE PoC PoC pour CVE-2025-24813, une vulnérabilité d'exécution de code à distance RCE dans Apache Tomcat. Important : Ce PoC est destiné uniquement à tester vos propres environnements ou à des fins éducatives. Toute utilisation de ce PoC pour exploiter des systèmes sa...

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 Ho creato un semplice exploit Python per react2shell CVE-2025-55182 USAGE 1. Salva lo script: salva il codice sopra come exploit.py. 2. Aggiorna gli Host: assicurati che reactor.htb risolva all'IP di destinazione nel tuo file /etc/hosts. echo " reactor.htb" | sud...

CVE-2026-78416

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

CVE-2026-76070

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

cve-2025-64446-fortiweb-exploit

CVE-2025-64446 Fortinet FortiWeb पथ ट्रैवर्सल RCE एक्सप्लॉइट Fortinet FortiWeb वेब एप्लीकेशन फ़ायरवॉल WAF में CVE-2025-64446 भेद्यता का पता लगाने और परीक्षण करने के लिए एक सुरक्षा अनुसंधान उपकरण। यह महत्वपूर्ण ज़ीरो-डे पथ ट्रैवर्सल भेद्यता सक्रिय रूप से वास्तविक दुनिया में शोषित की जा रही है और...

CVE-2025-2005

CVE-2025-2005 Il plugin WordPress Front End Users = 3.2.32 è vulnerabile al caricamento arbitrario di file Exploit del Plugin WordPress Front-End Users Informazioni sulla Vulnerabilità Nome del Plugin : Front-End Users Plugin Versione Affetta : = 3.2.32 Tipo di Vulnerabilità : Caricamento...

evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf EXP per CVE-2023-28434 MinIO non autorizzato a RCE Modificato da https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 Cosa è stato cambiato? aggiungere cmd/x.go, usato per eseguire comandi di sistem...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploit per scaricare configurazioni Cisco RV320 e ottenere RCE Implementazioni degli exploit CVE-2019-1652 e CVE-2019-1653 divulgati da Red Team Pentesting GmbH. Ho testato questi solo su un RV320, ma secondo l'avviso Cisco, anche l'RV325 è vulnerabile...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Execução Remota de Comando não autenticada via Cadeia de Filtros PHP Prova de conceito do exploit para CVE-2023-6553 — uma vulnerabilidade crítica de RCE não autenticada no plugin "Backup Migration" do WordPress versões ≤ 1.3.7. 📋 Visão Geral da...

Form-Tools-3.1.1-RCE

Form-Tools-3.1.1-RCE CVE-2024-22722 RCE via SSTI-Automatisierung mit Python. Die Sicherheitslücke Server Side Template Injection SSTI in Form Tools 3.1.1 ermöglicht Angreifern, beliebige Befehle über das Feld Group Name im Abschnitt Add Forms der Anwendung auszuführen. Dieses Skript automatisiert...

CVE-2026-39987-Poc

CVE-2026-39987-Poc Cliente WebSocket de Prova de Conceito PoC para o CVE-2026-39987 Marimo Pre-Auth RCE, destinado a testes de segurança autorizados. ⚠️ Aviso Legal Este script/ferramenta é fornecido apenas para fins educacionais, de pesquisa e de testes autorizados. Ele foi projetado para ser...

POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution

⚠️🚀 CVE-2025-24813 — Suíte de Exploração RCE Apache Tomcat root@kitploit: ⚡ Versão: 1.0 🛡️ CVE ID: CVE-2025-24813 Apache Tomcat RCE 🧬 Payloads: ysoserial / Java 🌐 Modo: Interativo + Stealth 🔬 Uso: Ético, Investigativo, Educativo 🌌 Visão Geral...

react-ssr-vulnerability

CVE-2025-55182 - POC RCE per React Server Components Questo è un POC solo per scopi educativi e di ricerca sulla sicurezza. Questa vulnerabilità è stata risolta nelle ultime versioni dei pacchetti interessati. Utilizza questo strumento solo su sistemi di tua proprietà o per i quali hai ricevuto...

CVE-2014-6271

Hellshocker 0.1.1 Tool zur Ausnutzung der Shellshock-Sicherheitslücke Müde von schwachen Shellshock-Exploits oder einfach nur "/bin/bash & /dev/tcp/IP/port 0&1" in den Server zu gelangen? Ja, du musst etwas Komplexeres auf den Server hochladen und ausführen, und das Base64-Kodieren einer riesigen...

CVE-2026-76071 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2026-76071

Netis NC63 (AC1200 Wireless Dual Band Gigabit MU-MIMO Router) firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in /bin/netis.cgi. The destHost parameter in the ipFilterList=mod action uses widthless %[^,] sscanf scansets that copy unbounded input into fixed 1...

CVE-2026-76070

Netis NC63 Wireless AC1200 router firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in the login handler /bin/netis.cgi. The custom Base64 decoder writes decoded password bytes into a fixed 64-byte stack buffer without capacity checks, allowing an unauthentica...