CVE-2020-16012-PoC

M2 Project - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu --disable-software-rasterizer...

cve-2024-32651

cve-2024-32651 changedetection rce mediante ssti...

test-cve-2025-29927

Test app to exploit CVE-2025-29927 The NextJS app has cookie based authentification and a middleware to prevent unauthorized access to /admin page. To start the app run yarn then yarn dev To get unauthorized access to /admin page by using CVE-2025-29927 vulnerability run a proxy-server which adds...

CVE-2023-50564

CVE-2023-50564 For educational purposes only. This script abuses CVE-2023-50564 to upload a reverse-php shell to the target server. You can use a shell like this one. Just zip the php file and pass the zip to this script. Example python3 cve-2023-50564.py -u http://idonot.exist -f shell.zip -p...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Scanner professionale per vulnerabilità RCE in Next.js RSC per CVE-2025-66478 🎯 Panoramica React2Shell Ultimate è uno scanner completo per vulnerabilità per CVE-2025-66478 — una vulnerabilità critica di Esecuzione Remota di Codice RCE che colpisce le applicazioni...

CVE-2025-55182-RCE-Exploit

POC for CVE-2025-55182 – Next.js 16.0.6 Remote Code Execution This repository contains a working proof-of-concept POC for CVE-2025-55182 , a critical deserialization vulnerability affecting Next.js 16.0.6. The exploit abuses $@ chunk deserialization and Chunk.prototype.then to gain full control...

EP4-redes

POC CVE-2018-15473 exploit Adapted from https://github.com/Rhynorater/CVE-2018-15473-Exploit To run this exploit you need to have installed: docker docker compose SSH server Let's start by pulling from DockerHub an image that has an old version 6.6 of SSH on an old Ubuntu: It may take a few minut...

CVE-2023-38646

CVE-2023-38646 - Metabase RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1...

CVE-2020-5377

CVE-2020-5377 CVE-2020-5377: Dell OpenManage Server Administrator File Read Usage: python3 CVE-2020-5377.py :...

CrafterCMS-CVE-2025-6384

CrafterCMS Authenticated RCE - Groovy Sandbox Bypass CVE-2025-6384 A Proof of Concept for an authenticated Remote Code Execution vulnerability in CrafterCMS. Vulnerability Summary An authenticated user with developer privileges can bypass the Groovy script sandbox in Crafter Studio to achieve...

CVE-2021-42321

CVE-2021-42321 Microsoft Exchange Server Poc The patch:https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321...

CVE-2026-108161

FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...

EUVD-2026-96316

FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...

exploit_CVE-2022-26134

exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This script can find vulnerable server for CVE-2022-26134 from Shodan Search Engine. Just need to ent...

POC-CVE-2025-55182

NoMoreBreach Advisory: React2Shell CVE-2025-55182 Severity: Critical CVSS 10.0 Vulnerability Type: Remote Code Execution RCE via Deserialization Status: Patched Dec 3, 2025 Advisory Source: NoMoreBreach.com Executive Summary The NoMoreBreach research team highlights a critical vulnerability in...

Cloudmare

Cloudmare Cloudmare is a simple tool to find the origin servers of websites protected by Cloudflare, Sucuri, or Incapsula with a misconfigured DNS. For more details about this common misconfiguration and how Cloudmare works, send me a private message. Here's what Cloudmare looks like in action. T...

CVE-2012-2593

Atmail XSS-CSRF-RCE Exploit Chain PoC atmail-rce.py: Exploits CVE-2012-2593 in Atmail's webmail interface. atmail-csrf.js: Javascript file which leverages CVE 2012-2593 into a CSRF to install a malicious plugin which executes a reverse shell Plugin.php: Atmail plugin to be installed which calls a...

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner A full-featured exploitation utility for CVE-2025-55182 — Remote Code Execution via React Server Components in Next.js. The scanner automatically crafts the multipart payload and abuses process.mainModule.require'childprocess'.execSync to achieve arbitrary OS comma...

CVE-2014-6271_Test

CVE-2014-6271Test CVE-2014-6271Test Obviously, this project is used to check if a server with cgi enabled is affected with CVE-2014-6271aka shellshock. Dependency Need GoogleSearchCrawler. Usage eg: python exp.py -g www.google.com This will test urls collected from google search result with keywo...

vCenter-Server-Workaround-Script-CVE-2021-44228

vCenter Server Workaround instructions CVE-2021-44228 Workaround instructions to address CVE-2021-44228 in vCenter Server VMware vCenter log4j workaround This is the workaround VMware vCenter log4j vulnerability CVE-2021-44228 processs put together as a single script VMware have released a python...