632820 matches found
0-click-RCE-Exploit-for-CVE-2024-50526
CVE-2024-50526 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin,...
CVE-2025-8971
CVE-2025-8971 SQL Injection Author: Byte Reaper Description : This exploit for CVE-2025-8971, a SQL injection vulnerability in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability exists in /admin/operations/travellers.php and can be exploited remotely via the val-username...
L4J-Vuln-Patch
NOTICE This tool is no longer necessary mojang has released its own patch which should cover everyone who is affected https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition WARNING THIS EXPLOIT EFFECTS BOTH CLIENTS AND SERVERS There is currently a exploit...
CVE-2018-7600
CVE-2018-7600 CVE-2018-7600 - Drupal 7.x RCE Drupal 7.58 unauthenticated RCE Requirements python3 python requests pip install requests Usage Install dependencies modify the HOST variable in the script run the code win Just install requests pip install requests, edit the file to change the host an...
CVE-2023-26035
POC for CVE-2023-26035 Works for ZoneMinder Versions prior to 1.36.33 and 1.37.33 Vulnerability : Remote Code Execution RCE Usage └─➜ python3 poc.py -h usage: poc.py -h --target TARGET --cmd CMD poc.py: error: the following arguments are required: --target, --cmd Curl Before jumping to rev shell,...
Detections-CVE-2026-23918
MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-23918 "Apache HTTP/2 Double-Free" — Detection & Response Package Published: 2026-05-04...
connectwise-automate-AiTM-rce
ConnectWise Automate Adversary-in-the-Middle Remote Code Execution Table of Contents Background Timeline Thoughts and Learnings Responsible Disclosure PoC Code Report Provided to ConnectWise Summary Vulnerable Configuration Impact Technical Details 1. HTTP Transport 2. Insufficient Protocol...
CVE-2026-7393-RCE
Pizzafy Ecommerce System 1.0 – Unrestricted File Upload in savemenu Leads to Remote Code Execution Details Field| Value ---|--- Vendor| SourceCodester Vendor URL| https://www.sourcecodester.com Product| Pizzafy Ecommerce System using PHP and MySQL Product URL|...
cdt-vulnsamba-deploy
CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...
THM-Vulnerability_Capstone-CVE-2018-16763
THM-VulnerabilityCapstone-CVE-2018-16763 A write up on the THM room Vulnerability Capstone & Exploit script for CVE-2018-16763. CREDITS I do not take credit for the discovery of this vulnerability. Thank you to the following people. Vulnerability Discovery: 0xd0ff9 TryHackMe Room & Author:...
CVE-2021-46398
CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this repository, you will find a proof of concept of the exploitation of the CVE-2021-46398 flaw through a docker compose, as well as an analysis of the impacts of this flaw on information systems. Exploit Title: FileBrowser 2.17.2 - Cross Site...
CVE-2024-39700-PoC
CVE-2024-39700 Proof of Concept Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Action Result:...
CVE-2017-11882
CVE-2017-11882 Article Link Office Remote Code Execution Vulnerability Hidden for 17 Years CVE-2017-11882 http://www.cnblogs.com/Hi-blog/p/7878054.html...
CVE-2021-26855
CVE-2021-26855 CVE-2021-26855, also known as Proxylogon, is a server-side request forgery SSRF vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server. According to Orange Tsai, the researcher who discovered the vulnerabilities,...
CVE-2020-0688
CVE-2020-0688 Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability" Usage: powershell -exec bypass -file .\CVE-2020-0688.ps1 -xaml -uri Example: This is an example of vulnerability validation by seting header in response. powershell -exec...
CVE-2022-48311
CVE-2022-48311 HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number...
CVE-2023-25610
CVE-2023-25610 Heap memory underflow in the FortiOS management interface leads to remote code execution. Scope and Limitations 1. Fortinet 6.x 2. Based on TLSv1.3; may vary across other TLS versions Usage python3 cve-2022-42475.py rhost rport lhost 'command' python3 CVE-2023-25610.py 192.168.10.1...
Log4jPatch
-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...
THM-Steel_Mountain-CVE-2014-6287
THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...