656174 matches found
ZeroPoint
ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect and mitigate exploitation of the CVE-2025-53770 zero-day vulnerability in Microsoft SharePoint Server. 🔍 What it Does This PowerShell script is designed to: Detect compromise indicators, such as suspicious .aspx webshells Parse ULS logs to...
log4j-CVE-2021-44228-test
log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...
Log4Shell
Log4Shell CVE-2021-44228 ☠️ Log4Shell PoC CVE-2021-44228 Proof-of-concept exploit for the critical Log4Shell vulnerability in Apache Log4j ≤ 2.14.1, which allows remote code execution via JNDI injections. ⚠️ This PoC is for educational purposes and controlled testing in authorized environments...
CVE-2023-1177-MLFlow
CVE-2023-1177 MLFlow Path Traversal About MLflow MLflow is an open-source platform for managing the end-to-end machine learning lifecycle. Primary Functions: MLflow tackles four primary functions: Tracking experiments to record and compare parameters and results MLflow Tracking. Packaging ML code...
RCE-RealEstateVIDEOPOC
This repository does not have a README...
CVE-2022-0944_RCE_Automation
I am not the researcher who found the exploit just the author of this code. This code is intended for educational purposes only...
CVE-2024-25503
CVE-2024-25503 Vulnerability type : Cross Site Scripting XSS Product: Advanced REST Client desktop application Vulnerable Version: 17.0.9 Vendor of the products:https://www.advancedrestclient.com/ 1. Description Cross-Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a...
CVE-2023-21716-POC
CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...
CVE-2026-110133
A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an accounting error during font rendering can bypass buffer size checks, triggering a heap-based buffer overflow. A remote attacker could exploit this by enticing a victim or automated...
CVE-2023-46818
CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash Introduction ISPConfig versions = 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records parameter in the /admin/languageedit.php endpoint. A malicious authenticated admin user can exploit this to...
exploit-CVE-2016-10034
PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...
CVE-2020-14882
CVE-2020-14882 coherence shellsession calc.exe import requests url = 'http://:/console/images/%252E%252E%252Fconsole.portal' \ '?nfpb=true&pageLabel=HomePage1&handle=com.tangosol.coherence.mvel2.sh.ShellSession' \ '%22java.lang.Runtime.getRuntime.exec%27calc.exe%27;%22'.format'192.168.1.53', '700...
l4s_poc
l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a personal project that runs a simple POC that will host an LDAP server and an HTTP server for the Log4Shell exploit. Server The runservers.py will setup a stripped down meterpreter client that will call back to the Metasploit instance pass...
php-cgi-cve-2024-4577
php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 A remote code execution vulnerability occurring in CGI mode of PHP language registered in the detection of PHP-CGI CVE-2024-4577 Argument Injection events from external IPs to internal servers. This is an event that occurs when PHP is executed in CGI mo...
CVE-2024-39930-PoC
CVE-2024-39930-PoC Exploit Code for CVE-2024-39930 gogs ssh server RCE...
CVE-2022-23529-Exploration
CVE-2022-23529 The JSON Web Token JWT library versions prior to 3.4.6, 4.0.4, and 4.1.5 are vulnerable to RCE. The HMAC hashing functions take any string as input which leads to RCE. Due to the preconditions, this vulnerability is not likly to be exploitable. In order to exploit this vulnerabilit...
CVE-2025-53694-to-CVE-2025-53691
Sitecore CVE Chain Exploits This repository contains proof-of-concept exploits for a critical vulnerability chain in Sitecore Experience Platform XP versions up to 10.4.1. Vulnerabilities CVE-2025-53694: Information Disclosure CVE-2025-53693: Cache Poisoning CVE-2025-53691: Remote Code Execution...
cve-2021-33879
CVEID : CVE-2021-33879 Name of the affected products and versions : GameLoop all versions prior to 4.1.21.90 Vulnerability type : CWE-494: Download of Code Without Integrity Check Summary GameLoop is an Android emulator developed by Tencent. It features an update mechanism which is not encrypted ...
CVE-2023-36159
CVE-2023-36159 Cross Site Scripting XSS vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page...