Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎 Overview: CVE-2025-47812 is a critical remote code execution RCE vulnerability affecting Wing FTP Server versions prior to 7.4.4. It was discovered by a security researcher and has been confirmed to be actively exploited in the wild. 🧱 Root...

CVE-2025-24893

استغلال XWiki SSTI أداة استغلال مكتوبة بـ Python لثغرة حقن القوالب من جانب الخادم Server-Side Template Injection - SSTI في XWiki عبر حقن قالب Groovy في نقطة نهاية SolrSearch. الثغرة النوع : حقن القوالب من جانب الخادم Server-Side Template Injection - SSTI المكوّن : خلاصة RSS الخاصة بـ XWiki...

ghe-push-option-rce-scanner

CVE-2026-3854 — RCE sur GitHub Enterprise Server via injection d'options push Aperçu Neutralisation incorrecte des valeurs d'options push dans GHE. Un attaquant disposant d'un accès push obtient une RCE sur l'instance. Champ| Valeur ---|--- CVE| CVE-2026-3854 Sévérité| CRITIQUE Produit| GitHub...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...

CVE-2022-26134

CVE-2022-26134 PoC !WARNING LEGAL DISCLAIMER: This tool is STRICTLY for EDUCATIONAL PURPOSES ONLY! Usage of this tool for attacking targets without prior mutual consent is ILLEGAL. It is the user's responsibility to obey all laws that apply whilst using this tool. The developer of this tool assum...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Description CVE-2024-47066 : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in src/app/api/proxy/route.ts does not consider redirect and could be...

struts_hack

This tool uses an exploit in the Apache Struts framework called CVE-2017-5638 to gain access to a vunerable server through an OGNL injection. It can be downloaded here you will need to run it from the command line Usage: strutshack target IP target port...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 نطالب بالإعادة الآمنة لجميع المواطنين الذين تم احتجازهم كرهائن من قبل الجماعة الإرهابية حماس. لن نرتاح حتى يتم إطلاق سراح كل رهينة ويعود إلى منزله بأمان. يمكنك المساعدة في إعادتهم إلى الوطن.https://stories.bringthemhomenow.net/ هذا النص البرمجي مصمم لاستغلال ثغرة...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei Template Description This repository contains a Nuclei template for detecting the CVE-2024-32030 vulnerability. This vulnerability allows for remote code execution via JMX Metrics Collection JNDI Resolution. Vulnerability Details ID: CVE-2024-32030 Name: JMX Metrics Collecti...

CVE-2024-49112-PoC

CVE-2024-49112-PoC CVE-2024-49112 LDAP RCE PoC and Metasploit Module Edit: links updated last 3 copies to go Link to Download: Contact Information You can reach me at: [email protected] please dont ask me if I can provide this for free, or if I can test your target, or how to add the module ...

CVE-2024-30043-XXE

CVE-2024-30043-XXE Credit The impact of the vulnerability is limited at present, but thanks to https://x.com/chudyPB for providing a clever bypass idea. https://x.com/chudyPB...

CVE-2023-22515-POC

CVE-2023-22515 CVE-2023-22515, a critical vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center, a Broken Access Control vulnerability. Attlassian has provided a CVSS base score of 10.0 Exploit Brief explanation: 1- Due to how Xwork interceptors parses...

RATel

RATel Please do not upload to virustotal ! To prevent RATel from being detected by antivirus, please do not upload the payload to TOTAL VIRUS. Each month I will test myself if the payload gets detected by antivirus. So you’ll have a photo every month to prove RAtel discretion. Description RAT-el ...

Windows-Privilege-Escalation-CVE-2021-1732

Windows Privilege Escalation CVE-2021-1732 Affected windows versions: Win10 1803 - 20H2, WinServer 2019, 2004 Screenshots: Read More On My Blog:- https://www.exploitblizzard.com/post/windows-privilege-escalation-cve-2021-1732...

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance, version C++, similaire à TeamViewer https://dydtjr1128.github.io/RemoteAssistance-Cpp/ Une version Java Swing a également été créée = Lien Cette version n'implémente que la mise en miroir locale, qui n'utilise pas encore le réseau. À faire - x Capture d'écra...

CVE-2021-44228_dockernize

Environnement de laboratoire pour la vulnérabilité CVE-2021-44228 Log4Shell Introduction Ce projet fournit un environnement dockerisé pour s'entraîner en toute sécurité et comprendre la vulnérabilité critique Log4j connue sous le nom de CVE-2021-44228 Log4Shell. Fonctionnalités clés Environnement...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 Implementation of FOLLINA-CVE-2022-30190 This repository contains an exploitation tool for the vulnerability FOLLINA-CVE-2022-30190 Disclaimer This tool developed for security testing and research purposes. by cloning / forking this tool the origin developer withdraw any...

CVE-2024-22263_Scanner

CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗...

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Execute various actions on a target web server...