PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload

CVE-2025-3914 - Arbitrary File Upload in Aeropage Sync for Airtable WordPress Description The Aeropage Sync for Airtable WordPress plugin ≤ v3.2.0 is vulnerable to authenticated arbitrary file uploads due to insufficient file type validation in the aeropagemediadownloader function. Attack Vector ...

MultiExploit

Multi-Service Vulnerability Scanner Supported Vulnerabilities & Attack Vectors Microsoft SQL Server Vulnerabilities CVE-2023-21173 : Remote Code Execution in SQL Server 2022 Potential exploitation of: Weak authentication configurations Misconfigured server principals xpcmdshell abuse Advanced...

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

CVE-2022-37332-RCE-

Foxit nday : CURRENTLY UNDER WORK... ALL I NEED TO IMPLEMENT IS JIT SPRAYING ..... also tested on Version: 9.0.1.1049 so yeahh idk : enjoy...

CVE-2024-2054

CVE-2024-2054 Artica-Proxy administrative web application insecure deserialization RCE An exploit proof of concept for ARTICA PROXY Administrative web application CVE-2024-2054 Blog Post More details here:...

Dnstracer-1.9-Fix

Dnstracer-1.9-Fix dnstracer dnstracer determines where a given Domain Name Server DNS gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer. Problem Stack-based buffer overflow in dnstracer through 1.9 allows attackers to execute...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit Module Overview This is a Metasploit module for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This module is designed to serve as a clean, minimal, and...

CVE-2024-25153

Exploit for CVE-2024-25153 Table of Contents Click to expand 1. Introduction 2. Installation 3. Usage 4. Contributing 5. License Introduction Welcome to the Exploit for CVE-2024-25153! This project is a solution to exploit the CVE-2024-25153 vulnerability and execute code remotely in Fortra...

CVE-2025-32682

🐚 CVE-2025-32682 - Arbitrary File Upload in MapSVG Lite = 8.5.34 📌 Plugin Details Name: MapSVG Lite Affected Version: = 8.5.34 Vulnerability Type: Arbitrary File Upload CVE ID: CVE-2025-32682 Published Date: 15 April, 2025 CVSS Score: 9.9 Critical 💥 Vulnerability Summary The MapSVG Lite plugin fo...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...

pickle_exploit

PickleExploit Demonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML 🖥️ This script was developed by h3x0v3rl0rd. This proof of concept PoC demonstrates a potential security vulnerability involving the serialization and deserialization of Python objects using the...

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821 Discoverer: Idan Malihi Description An issue in Activision Call of Duty Modern Warfare: Warzone v.2 allows a local attacker to execute arbitrary code via a crafted file to the UMPDC.dll, MSIMG32.dll,...

CVE-2024-48990

======================================================================== CVE-2024-48990 and CVE-2024-48992 To determine whether a Python process a process that is running the Python interpreter needs to be restarted, needrestart extracts the PYTHONPATH environment variable from this process's...

CVE-2022-46169

CVE-2022-46169 This repository contains a Proof of Concept PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti = 1.2.22 by chaining an Authentication Bypass and a Command Injection, described by Sonar in this blog post. The same vulnerabilities were also discovered by: Steven Seeley mrme of...

CVE-2024-22274-RCE

CVE-2024-22274 Exploit This repository contains an exploit for CVE-2024-22274. The exploit creates a new user on a remote machine via SSH and then provides a root shell. Requirements Go Golang installed on your machine. You can download it from here. A remote machine with SSH access. Compilation ...

GitStackRCE

GitStackRCE GitStackRCE Vulnerability CVE-2018-5955 Exploit...

CVE-2023-23397

CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook CVE-2023-23397 is a remote code execution vulnerability in Microsoft Outlook, a popular email client used by millions of users worldwide. This vulnerability was discovered by security researcher Leandro Costa and reported to...

CVE-2024-33210

CVE-2024-33210 A cross-site scripting XSS vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: flatpress CMS Affected Product Code...

yaml-payload-2

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

Malicious code in log-utils-sdk (PyPI)

Source: kam193 9e04ec7e9e18068a3876db982defaaa4710d22d8bf619e65f6976b8cf7ddd3e9 Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in background periodically connects to a remote host and waits for...