638935 matches found
poc-cve-2024-23897
poc-cve-2024-23897 this code is my attempt to write a proof of concept under cve 2024 23897. allows you to perform RCE on the attacked machine through the vulnerable args4j module how to use: go run poc.go http://127.0.0.1:8888/ /etc/passwd...
cve-2021-26084-confluence
This is a quick and dirty poc, tuned for a specifc confluence instance as none of the existing off the shelf pocs worked. Obviously it's almost entirely based on the work of https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md and https://github.com/alt3kx/CVE-2021-26084PoC You'll nee...
Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution-Exploit
This repository does not have a README...
CVE-2024-4577
Just for researching Poc For Default XAMPP curl -v -d "" http://127.0.0.1/php-cgi/php-cgi.exe/?%add+allowurlinclude%3Don+-d+autoprependfile%3Dphp%3A//input+-d+cgi.forceredirect%3D0...
Prestashop-CVE-2024-34716
Exploit Script for CSRF and Reverse Shell Attack This script automates a CSRF Cross-Site Request Forgery exploit to upload a PHP reverse shell on a target's web server and execute it. The reverse shell is delivered as a ZIP file via a crafted CSRF payload, which is triggered when a privileged use...
Follina_MSDT_CVE-2022-30190
Microsoft explains that “a remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker ca...
CVE-2026-98483
A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. A reference counting error in the nfcgetlocalgeneralbytes function causes memory to be freed prematurely while callers still access the returned pointer. A local attacker could exploit this use-after-free vulnerability...
CVE-2025-55752
🚨🚨 CVE-2025-55752 — Apache Tomcat: Directory-protection bypass via Rewrite Valve → PUT-based RCE🚨🚨 Summary CVE-2025-55752 is a security regression in Apache Tomcat introduced while fixing bug 60013. When the Rewrite Valve is used, Tomcat applies path normalization before URL decoding. This...
CVE-2026-93042
A flaw was found in the Linux kernel's dmaengine: dw-edma component. This vulnerability occurs because the dw-edma driver incorrectly calls a callback function after a Direct Memory Access DMA descriptor has been terminated. This can lead to a use-after-free condition, where the system attempts t...
CVE-2026-92518
A flaw was found in the Linux kernel's RISC-V BPF JIT compiler. When Control-Flow Integrity CFI with Clang is enabled, an error in calculating the tail call jump offset can lead to kernel stack corruption. This issue causes the system to improperly adjust the stack pointer, which can result in...
CVE-2026-92513
A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access manaib component. The manatablestoreudqp function can incorrectly manage queue pair QP references during partial table insertions. This can lead to a use-after-free vulnerability, where a freed memory region is accessed,...
CVE-2026-92512
A flaw was found in the Linux kernel's RDMA core component. A local attacker could exploit a use-after-free vulnerability due to improper synchronization during the Query Packet QP destruction process. This could lead to a system crash, resulting in a denial of service, or potentially allow for...
CVE-2026-92507
A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access core component. A synchronization issue in the ibdeallocpduser function, when a Protection Domain PD is accessed via the netlink path, can lead to a use-after-free vulnerability. This could allow a local attacker to potential...
CVE-2022-21445
CVE-2022-21445 Exploit - PoC This toolkit generates exploit payloads for CVE-2022-21445, a critical Java deserialization vulnerability affecting Oracle WebLogic Server 12.2.1.x running Oracle ADF Faces. The flaw exists in the RemoteApplicationResourceLoader component and allows an attacker to sen...
CVE-2026-92482
A flaw was found in the Linux kernel's pinctrl Mediatek driver. This vulnerability occurs because the gpiochip memory is freed prematurely while it is still registered, leading to a use-after-free condition. This can happen when the driver is built as a module and then unloaded. A local attacker...
CVE-2025-47812
CVE-2025-47812 — Wing FTP Server Unauth RCE rewrite Python exploit for the unauthenticated Lua-injection RCE in Wing FTP Server ≤ 7.4.3. Designed for shell delivery — one command from check to a working netcat callback. Written some time ago for wingData lab on HTB and open-sourced now. Use only...
CVE-2026-90421
A flaw was found in the Linux kernel's Peripheral Component Interconnect PCI subsystem. This Use-After-Free UAF vulnerability arises when a PCI device probe operation occurs concurrently with the removal of a dynamic ID. This timing issue could allow a local attacker to cause a system crash,...
SirepRAT
SirepRAT - RCE as SYSTEM on Windows IoT Core SirepRAT Features full RAT capabilities without the need of writing a real RAT malware on target. Context The method is exploiting the Sirep Test Service that’s built in and running on the official images offered at Microsoft’s site. This service is th...
weblogic2021
This project is intended for security research and authorized use only. Users are responsible and obligated to comply with local laws and regulations. weblogic2021 CVE-2021-1994, CVE-2021-2047, CVE-2021-2064, CVE-2021-2108, CVE-2021-2075, CVE-2019-17195, CVE-2020-14756, CVE-2021-2109 7 critical...