Spring-Cloud-Gateway-CVE-2022-22947

Spring-Cloud-Gateway-CVE-2022-22947 Security advisory for the remote code execution vulnerability in Spring Cloud Gateway. This vulnerability occurs when the Gateway Actuator endpoint is enabled and exposed in Spring Cloud Gateway, making applications using Spring Cloud Gateway susceptible to cod...

CVE-2021-41773

CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

Added-Pentest-Ground-to-vulnerable-websites-for-training

https://vulners.com/cve/CVE-2017-0089 Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF Arbitrary File Write to RCE PoC Derivation Process and Reflection Scope: This content is intended solely for local test environments, authorized reproduction environments, vulnerability verification, and protection rule analysis. Do not use...

SirepRAT

SirepRAT - RCE as SYSTEM on Windows IoT Core SirepRAT Features full RAT capabilities without the need of writing a real RAT malware on target. Context The method is exploiting the Sirep Test Service that’s built in and running on the official images offered at Microsoft’s site. This service is th...

CVE-2019-9194-elFinder-Command-Injection-PoC

CVE-2019-9194 — elFinder Command Injection PoC Command injection vulnerability in elFinder = 2.1.47 via the PHP connector component. Allows unauthenticated remote code execution as the web server user. How it works Uploads a valid JPEG with a malicious filename containing a shell command. Trigger...

CVE-2024-8856

CVE-2024-8856: WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability Overview CVE-2024-8856 is a security vulnerability found in the WP Time Capsule plugin for WordPress that allows unauthenticated users to upload arbitrary files to the server. This can lead to remote code executio...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – Unauthenticated Arbitrary File Upload RCE 📌 Overview This repository contains a modified proof-of-concept exploit for the WordPress plugin Royal Elementor Addons and Templates versions ≤ 1.3.78. The vulnerability allows unauthenticated arbitrary file upload , whi...

CVE-2024-25600

MODIFIED CVE-2024-25600 original - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE Exploit A Python exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution vulnerability. Description This tool exploits a critical vulnerability in WordPress...

CVE-2025-58434-AND-59528-POC

Flowise Dual CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents Overview Vulnerability Details CVE-2025-58434 — Account Takeover...

freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Summary FreePBX is the open-source web GUI for Asterisk PBX, widely deployed in enterprise telephony environments. The Endpoint Manager module exposes an AJAX handler at /admin/ajax.php that accepts a brand parameter a...

westone-CVE-2021-21972-scanner

westone-CVE-2021-21972-scanner VMware vCenter Server remote code execution vulnerability.A malicious attacker with access to port 443 can send a carefully constructed request to vCenter Server, which will eventually cause remote arbitrary code execution. Installation & Usage git clone...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Directory-protection bypass via Rewrite Valve → PUT-based RCE🚨🚨 Summary CVE-2025-55752 is a security regression in Apache Tomcat introduced while fixing bug 60013. When the Rewrite Valve is used, Tomcat applies path normalization before URL decoding. This...

CVE-2026-2035703-x300

CVE-2026-108576: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Published — coordinated disclosure via CISA ICS and CERT/CC Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-108576 assigned by VulDB CNA, published on cve.o...

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...

cve_2026_34621_advanced

CVE-2026-34621 Advanced Exploit Generator A sophisticated, cross-platform exploit generator for CVE-2026-34621 – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code execution on Windows and macOS. ⚠️ IMPORTANT DISCLAIMER This too...

CVE-2025-49113-nuclei-template

Nuclei vulnerability detection template - CVE-2025-49113 - Roundcube ≤ 1.6.10 Post-Authentication Remote Code Execution CVE ID: CVE-2025-49113 Severity: Critical CVSS 10.0 Discovered by: Kirill Firsov FearsOff Date Disclosed: June 1, 2025 Fixed in: Roundcube 1.6.11 / 1.5.10 LTS -...

log4j-rce-CVE-2021-44228

Overview This is a project to actually test the remote code execution vulnerability CVE-2021-44228 in log4j2. Start the Containers docker-compose up It takes a little time for the log4j container to become usable after starting. Check the progress with the following command: docker logs -f log4j...

CVE-2023-46604

Technical Summary of the Attack: CVE-2023-46604 The script exploits an insecure deserialization vulnerability in Apache ActiveMQ CVE-2023-46604 to achieve remote code execution on the target server. Description of the Exploitation Process Vulnerability Target: The vulnerability resides in the...