628689 matches found
CVE-2025-24893
Exploit for CVE-2025-24893 CVE-2025-24893 is a critical unauthenticated remote code execution RCE vulnerability affecting the XWiki Platform. This flaw lets any guest user inject and execute arbitrary Groovy code āwithout authenticationāvia a specially crafted RSS request to the SolrSearch...
CVE-2021-42013_Reverse-Shell
CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083 10.0.000.000 9999 nc -lvnp 9999...
CVE-2026-108384
The dataclasses-avroschema library (versions 0.38.0 through 0.70.5 ) contains a code injection vulnerability in the BaseGenerator.parse_fixed function. The root cause is the direct interpolation of a fixed type's aliases value into a generated types.confixed annotation. While lists are correctly ...
CVE-2020-9484
CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs Ā» Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...
Exihibitor-RCE
Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Step 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Step 2: $ cd Exihibitor-RCE/ Step 3 optional: You might need to edit json data payload in the script. To do that simply capture the request using burpsuite when comiting the...
CVE-2024-28255
OpenMetadataRCE CVE-2024-28255 Batch scan/exploit 1.ćć®ćć¼ć«ćÆć»ćć„ćŖćć£ćć¹ćć®ćæć«ä½æēØććć¦ćććéę³ćŖę»ęć«ć¤ćć¦ćÆč²¬ä»»ćč² ćć¾ćć. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.å·„å ·ä» ēØäŗå®å ØęµčÆļ¼ä»»ä½éę³ę»å»ę¬äŗŗę¦äøč“č“£. Help Need to modify the DNS address in line 9 of the code. python3...
F5-BIG-IP-POC
F5-BIG-IP POC Written in Go, a collection of POCs for CVE-2020-5902, CVE-2021-22986, CVE-2022-1388. Other F5 POCs will be added later. author:160team.west9B For use only by security researchers with authorization. Comply with cybersecurity laws. Any consequences are your own responsibility, and t...
CVE-2019-11932
CVE-2019-11932 Modify the listening address attacker's and the listening port in the exploit.c file Following hex code: 3139 322e 3136 382e 322e 3732 2034 3434 3420 Compile the code: gcc -o exploit egiflib.c exploit.c Run the compiled file ./exploit exploit.gif copy/paste the output into a gif...
dlinject
dlinject.py Inject a shared library i.e. arbitrary code into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...
CVE-2026-108381
The dataclasses-avroschema library (versions 0.44.0 through 0.70.5 ) is vulnerable to code injection within its Pydantic and AvroDantic model generators. The vulnerability occurs because the library inserts a schema field's pydantic-class value into a generated field annotation without safely res...
Eaton-Intelligent-Power-Manager-Local-File-Inclusion
Eaton-Intelligent-Power-Manager-Local-File-Inclusion Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution. CVE-2018-12031 To exploit vulnerability, someone could use...
cve-2019-7609
CVE-2019-7609 Exploit for CVE-2019-7609 written in python3.6+ based on the code by LandGrey. CVE-2019-7609 : RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer. Usage 1. Start a listener 2. Run the exploit with the target url base url of the kiba server, the listener host...
CVE-2026-108380
The dataclasses-avroschema library (versions 0.65.9 through 0.70.5 ) is vulnerable to code injection via the PydanticFieldRepresentation.add_field_properties function. The root cause is the failure to escape a schema field's doc value when inserting it into a generated pydantic.Field description ...
CVE-2026-108379
The dataclasses-avroschema library (versions 0.38.0 through 0.70.5 ) contains a code injection vulnerability. The BaseGenerator.parse_fixed function fails to escape or validate a fixed type's namespace value when generating Python code from Avro schemas. An attacker can provide a crafted quote to...
CVE-2024-44902
CVE-2024-44902 Vulnerability description A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. Affects Version Thinkphp v6.1.3 to v8.0.4 Exploit condition The thinkphp framework should have installed the Memcached extension. Vulnerability...
CVE-2014-6271
CVE-2014-6271 A vulnerability known as "ShellShock" exists in GNU Bash through 4.3 due to how it processes trailing strings in the values of environment variables after function definitions. This vulnerability enables remote attackers to execute arbitrary code by crafting the environment in certa...
CVE-2022-22947-Rce_POC
CVE-2022-22947-RcePOC Batch URL detection of Spring Cloud Gateway CVE-2022-22947 Usage py Spring-Cloud-Gateway.py UrlsPath After execution, a gateway.log file is generated, where '+', '-', '' indicate 'vulnerable', 'not vulnerable', and 'request error' respectively...
exploit-CVE-2021-44228
CVE-2021-44228 ā Log4j RCE Unauthenticated About This is a proof-of-concept exploit for Log4j RCE Unauthenticated CVE-2021-44228. This vulnerability affects versions 2.15.0. For more information: https://www.fastly.com/blog/digging-deeper-into-log4shell-0day-rce-exploit-found-in-log4j Contributor...
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability This script provides a proof of concept PoC for CVE-2024-21413, a critical security vulnerability discovered in Microsoft Outlook with a CVSS score of 9.8. This vulnerability, dubbed the MonikerLink flaw, has wide-ranging...
CVE-2024-7029
PoC tool for exploiting CVE-2024-7029 in AvTech devices š¤ README Translation English ŁŲ§Ų±Ų³Ū šø Screenshot š Introduction CVE-2024-7029 highlights a severe security issue in AVTech devices, where attackers can bypass authentication and execute arbitrary commands remotely. This vulnerability poses...