CVE-2020-9547

CVE-2020-9547：FasterXML/jackson-databind Remote Code Execution Vulnerability...

CVE-2021-34371.jar

CVE-2021-34371.jar CVE-2021-34371.jar from https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371/rhinogadget USE EXP...

CVE-2018-16341

CVE-2018-16341 Nuxeo Authentication Bypass Remote Code Execution 10.3 using a SSTI - CVE-2018-16341 Detailed analysis not english : https://www.freebuf.com/vuls/193000.html https://blog.riskivy.com/nuxeo-rce-analysis-cve-2018-16341/ Security Advisory :...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' \ --data-binary...

BadBlue

BadBlue Windows CVE-2024-21306 BadBlue implementation Using DuckyScript Unauthenticated Peering Leading to Code Execution Using HID Keyboard This is an implementation of the CVE discovered by marcnewlin And some code from BlueDucky Introduction BadBlue is a powerful tool for exploiting a...

Online-Admission-System-RCE-PoC

This repository does not have a README...

CVE-2019-15858

CVE-2019-15858 Unauthenticated Remote Code Execution at Woody Ad Snippets PoC The vulnerabilities discovered by nintechnet and exploit released by GeneralEG & X-Vector An unauthenticated options import vulnerability combined with a stored XSS vulnerability can lead to remote code execution in the...

CVE-2024-52380

CVE-2024-52380 Picsmize = 1.0.0 - Unauthenticated Arbitrary File Upload Description The Picsmize plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to...

CVE-2021-42171

CVE-2021-42171 File upload to Remote Code Execution on Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

vuln-chm-hijack

PuTTY vulnerability vuln-chm-hijack Potential malicious code execution via CHM hijacking About Up to and including version 0.70, when you launched the online help in any of the Windows PuTTY GUI tools, the tool would locate its help file by looking alongside its own executable. If you were runnin...

CVE-2025-6218-POC

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2021-20837

CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...

CVE-2024-3400-RCE-Scan

Cyberspace Mapping Dork Fofa app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye app:"Palo Alto Networks firewall httpd"...

CVE-2019-7609

CVE-2019-7609 Kibana Vulnerability allowing remote code execution due to a flaw in Kibana's Timelion visualizer Environment Setup docker 1. Run the attached docker-compose.yml. docker-compose up -d 2. Access http://127.0.0.1:5601 in a browser. Exploit 1. Prepare a reverse shell. $ nc -lvp 6666 2...

CVE-2020-5902-POC-EXP

CVE-2020-5902-POC-EXP Usage python3 f5rce.py scan iplisttxt python3 f5rce.py https://test.cn:443 ifconfig Scan Mode RCE Mode...

CVE-2026-63077

Unauthenticated Remote Code Execution in JetBrains TeamCity CVE-2026-63077 Overview This is a proof-of-concept exploit script for CVE-2026-63077. Organizations can use this script to validate their detection and remediation posture. For a full technical analysis of CVE-2026-63077, please read our...

CVE-2022-30190

CVE-2022-30190 Follina Educational Malware Development, Exploitation, Analysis and Mitigation A fully documented proof-of-concept demonstrating the Follina vulnerability - from social engineering delivery through to exploitation, forensic analysis, and patch development. ⚠️ Educational Use Only...

CVE-2025-31337

CVE-2025-31337 Security Advisory CVE ID: CVE-2025-31337 Published: 2025-03-15 CVSS Score: 9.8 Critical CWE: CWE-120 Buffer Copy without Checking Size of Input Description A critical buffer overflow vulnerability was discovered in the AIDR ChatBot Framework version 4.2.0 and earlier. The...

CVE-2024-4577

Fastest CVE-2024-4577 Exploitation Tool Description: PHP CGI Remote Code Execution The CVE-2024-4577 Exploit Tool exploit.py is a Python script designed to exploit web servers' specific vulnerability CVE-2024-4577. Based on the response content, it sends POST requests to a list of provided hosts ...