jboss-autopwn-1

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

CVE-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution Exploit CVE-2023-4220 Overview This repository contains a Bash script that exploits an unauthenticated remote code execution RCE vulnerability in Chamilo LMS via arbitrary file write. The vulnerability is identified as CVE-2023-4220. This exploit...

CVE-2024-34102

CVE-2024-34102 - CosmicSting XXE Exploit Exploit for CVE-2024-34102 CosmicSting - XML External Entity XXE vulnerability in Adobe Commerce and Magento. 📋 About the Vulnerability CVE-2024-34102 is a critical XXE XML External Entity vulnerability affecting: Adobe Commerce versions 2.4.7, 2.4.6-p5,...

CVE-2023-49070

CVE-2023-49070 Pre-auth RCE in Apache Ofbiz!! Usagse Install Open JDK 11 First! sudo apt install openjdk-11-jdk Check POC Video: https://youtu.be/gDzYb6YvBSQ...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE on HFS 2.3 - CVE-2014-62 🔖 Title of the Project Remote Code Execution via HTTP File Server HFS 2.3 ⚙ Tools Used • Kali Linux • Nmap • Metasploit • Target: HFS 2.3 on Windows 7 🔐 Vulnerability Details • Name: CVE-2014-6287 • Type: Remote Code Execution • Cause:...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview Field| Details ---|--- CVE ID| CVE-2026-0848 Package| nltk Natural Language Toolkit Registry| PyPI Affected Versions| = 3.9.2 Vulnerability...

CVE-2023-6019

CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python dependencies. Run python...

BadBlue

BadBlue Windows CVE-2024-21306 BadBlue implementation Using DuckyScript Unauthenticated Peering Leading to Code Execution Using HID Keyboard This is an implementation of the CVE discovered by marcnewlin And some code from BlueDucky Introduction BadBlue is a powerful tool for exploiting a...

S2-057-CVE-2018-11776

S2-057-CVE-2018-11776 A simple exploit for Apache Struts RCE S2-057 CVE-2018-11776 IMPORTANT: Is provided only for educational or information purposes. Deploy test environment git clone https://github.com/vulhub/vulhub cd vulhub/struts2/s2-057 docker-compose up -d Usage exploit.py Example $ pytho...

bmc_bladelogic

BMC Bladelogic RSCD remote exploits for Linux and Windows Change passwords, List users and Remote code execution Exploiting vulnerabilities in BMC BladeLogic RSCD agent CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 Published on exploit-db BMCrexec.py...

CVE-2023-40031

CVE-2023-40031 Analysis and Reproduction of notepad++ Heap Buffer Overflow Vulnerability CVE-2023-40031 Vulnerability Overview Notepad++ is a well-known open-source code editor that runs on Windows and supports multiple programming languages. Recently, security researchers examined Notepad++ and...

CVE-2022-24355

CVE-2022-24355 Tplink wr841 v10 rce exploit without authorisation ⚠️ Disclaimer The code in this repository is provided as-is for educational and defensive security research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any...

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

Remote Code Execution – CVE-2024-28397 pyload-ng / js2py This repository contains a Proof-of-Concept PoC exploit for CVE-2024-28397 , a Remote Code Execution vulnerability affecting pyload-ng due to insecure usage of js2py. Disclaimer: This PoC is for educational and research purposes only. Do no...

CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...

Oracle-WebLogic-CVE-2017-10271

WebLogic Wls-wsat XMLDecoder Vulnerability Description mitre:https://vulners.com/cve/CVE-2017-3506 Early on, hackers leveraged the WebLogic WLS component vulnerability to launch large-scale remote attacks against enterprise servers, resulting in a large number of compromised servers. The number o...

wp2shell-Exploit-Waf-Bypass

| \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 by Venexy M4xSec Unauthenticated Remote Code Execution on WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Patched in 6.8.6, 6.9.5, 7.0.2. Quick...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...

cve-2026-27483

CVE-2026-27483 MindsDB Path Traversal to RCE PoC This PoC script is based on the following GitHub advisory By default MindsDB does not use auth PoC supports both unauthenticated and authenticated modes We can query /api/handlers/ to find available handlers, use any available but not installed...