CVE-2026-115301

The Contact Form by Supsystic WordPress plugin, in versions before 1.11.1 , is vulnerable to Server-Side Template Injection (SSTI) . The root cause is the lack of sandboxing for the template engine used to render forms, allowing stored form-editor content to be processed as executable template co...

CVE-2022-46169

Cacti remoteagent.php Remote Command Execution Vulnerability CVE-2022-46169 Vulnerability Description Cacti is a server monitoring and management platform. A command injection vulnerability exists in versions 1.2.17 to 1.2.22. An attacker can bypass server-side validation via the X-Forwarded-For...

CVE-2024-55347

CVE Disclosure: CVE-2024-55347 Public Disclosure of CVE-2024-55347 🚀 Date: 10-02-2025 Summary A Binary Planting vulnerability in Kroll Artifact Parser And Extractor KAPE v1.3.0.2 allows attackers to escalate privileges and execute arbitrary code by placing a maliciously crafted Binary file in a...

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit Description This repository contains an exploit for CVE-2024-3273 , a critical vulnerability found in specific D-Link devices that allows for Remote Code Execution RCE. The vulnerability arises from improper input validation in the...

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC by CRFSlick, discovered by AkkuS An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main&opt=personal...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 Unauthenticated Remote Code Execution Uses Python 3 Running without Docker: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py Running with Docker:...

CVE-2020-6418

CVE-2020-6418 The CVE 2020-6418 is about the the type confusion in V8 in Google chrome.The affected versions were prior to 80.0.3987.122. The vulnerability is achived by remote attacker accessing the shell of a target device via a crafted HTML page. Environment Requirements 1. Google Chrome with...

Grav-CMS-RCE-Authenticated

Grav CMS Remote Code Execution Authenticated - CVE-2024-28116 Info This code is an adaptation fromGraver Github repository with some improvements based on this video. Exploit against Grav CMS for versions below 1.7.45 based on SSTI + RCE vulnerabilities, labeled as CVE-2024-28116. This script...

CVE-2024-1655

CVE-2024-1655 Description ASUS ExpertWiFi EBM63, EBM68, and RT-AX57 Go firmwares before the 12-04-2024 patch contain a command injection vulnerability in splashpageSDN.cgi function. When an attacker sends a specially crafted request, they can achieve arbitrary code execution. references: Official...

CVE-2024-24590-ClearML-RCE-Exploit

CVE-2024-24590 — ClearML Pickle Artifact RCE Overview Field| Details ---|--- CVE| CVE-2024-24590 Software| ClearML Affected Versions| 0.17.0 – 1.14.2 Vulnerability| Unsafe pickle deserialization of task artifacts Authentication| Requires write access to a ClearML project Impact| Remote Code...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 is a critical security vulnerability affecting Apache Tomcat, allowing attackers to exploit misconfigurations or weaknesses to achieve remote code execution RCE. When exploited, this vulnerability can lead to server compromise, data leakage, or privilege escalation...

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet," the...

CVE-2022-26134

CVE-2022-26134 PoC !WARNING LEGAL DISCLAIMER: This tool is STRICTLY for EDUCATIONAL PURPOSES ONLY! Usage of this tool for attacking targets without prior mutual consent is ILLEGAL. It is the user's responsibility to obey all laws that apply whilst using this tool. The developer of this tool assum...

CVE-2021-42013

CVE-2021-42013 Description This script exploits CVE-2021-42013 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install git clone...

CVE-2022-23862

CVE-2022-23862: Local Privilege Escalation via Unauthenticated JMX in YSoft SafeQ The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the “NT Authority\System” user, we were able to use the...

cve-2022-41352-zimbra-rce

This repository does not have a README...

cve-2021-41773

cve-2021-41773 Run the Server $ docker build -t cve-2021-41773 . $ docker run --rm -d -p 80:80 cve-2021-41773 Exploitation curl --data "echo;id" 'http://localhost/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd' Root Cause Misconfiguration in the httpd.conf file combined with Path traversal = RCE...

CVE-2025-7766

CVE-2025-7766 PoC Exploit PoC for exploiting XML External Entity vulnerability in CVE-2025-7766. Demonstrates file read /etc/passwd and out-of-band HTTP callbacks. Author : Byte Reaper CVE : CVE-2025-7766 Vulnerability : Remote Code Execution via XML External Entity XXE PoC for exploiting XXE in...

CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...