CVE-2023-27372-POC

CVE-2023-27372-POC Overview This code is a Python POC Proof of Concept for detecting whether a target website has the CVE-2023-27372 vulnerability. You can run this code by providing a single URL or a text file containing multiple URLs. Affected version: SPIP "; Features Check whether the target...

CVE-2021-43811

CVE-2021-43811 awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811 NVD Description Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 us...

CVE-2023-22047

Description: CVE-2023-22047 is unauthentication read file on oracle-peoplesoft. However, advance exploit attacker can use this vulnerability to execute remote code execution. In the peoplesoft application "Portal.war"," Serlet "WSRP Consumer ResourceProxy" enables the ability to read files and ma...

CVE-2017-10271

CVE-2017-10271 WebLogic wls-wsat component deserialization vulnerability CVE-2017-10271 detection script Usage $ python CVE-2017-10271 url You also need to register an account on ceye.io, and fill in the Identifier and API Token provided by it in the following part of the code: Features Detect...

CVE-2023-38831-RaRCE

RaRCE, Exploit generator for CVE-2023-38831 This is an easy to install and easy to use, versatile exploit generator for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a...

CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains a comprehensive scanner and exploit tool for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC. It also includes a realistic "Lab Environment" to safely test and understand the...

CVE-2024-49113

LDAP Nightmare An exploit for CVE-2024-49113 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

CVE-2017-8759-exploits

CVE-2017-8759-exploits Two versions of CVE-2017-8759 exploits Example 1 - Downloads a .Net dll from a remote location without touching disk, loads and executes Example 2 - Loads an embedded .Net dll and executes...

CVE-2022-22965-Spring4Shell

Spring4Shell Spring4Shell CVE-2022-22965 Proof Of Concept with a vulnerable Tomcat server with a vulnerable spring4shell application. Details about this vulnerability https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...

CVE-2025-24367-Cacti-PoC

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

CVE-2022-44877

Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877 + Centos Web Panel 7 Unauthenticated Remote Code Execution + Centos Web Panel 7 - log ➜ CVE-2022-44877 cat log examplelog ➜ CVE-2022-44877 echo "examplelog $whoami" log ➜ CVE-2022-44877 cat log examplelog examplelog root ➜...

Watchguard-RCE-POC-CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 Watchguard RCE POC CVE-2022-26318 The CVE for this issue is CVE-2022-26318...

CVE-2022-26134

POC - Atlassian Confluence OGNL Injection Remote Code Execution RCE Vulnerability CVE-2022-26134 Tested on Confluence Version 7.13.6 Setting up environment Clone the repository docker-compose up -d On http://localhost:8090 you shall see confluence up and running. Next, get an evaluation license f...

CVE-2010-5301

CVE-2010-5301 A proof of concept of an SEH overflow with arbitrary dll injection Description Kolibrì HTTP Server 2.0 is affected by a stack-based buffer overflow. At the time of discovery this vulnerability was exploited by simply overwriting the instruction pointer with a JMP ESP instruction,...

CVE-2024-25641

Cacti CVE-2024-25641 Authenticated Package Upload RCE Proof of Concept PoC This script is a Proof of Concept PoC for exploiting the CVE-2024-25641 vulnerability in Cacti, a web-based monitoring tool. The script automates the process of authenticating with the application, uploading a malicious...

CVE-2020-6364

CVE-2020-6364 Remote code execution in CA APM Team Center Wily Introscope. Original advisory A deserialization vulnerability in CA APM Team Center leads to unauthenticated remote code execution on the server. When authenticating to the server a cookie is returned that starts with the infamous rO0...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code v...

CVE-2025-55182

React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...