CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR Labs c 2018 Details this proof of concept exploit targets Safari 11.0.3 13604.5.6 on macOS 10.13.3 17D47 versions only. compile the payload of your choice as a dylib with a constructor run python filetojsarray.py your.dylib payload.js...

CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress = 2.3.3 - Unauthenticated Arbitrary File Upload Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check o...

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — Pre-Auth RCE Alert 🚨 🧩 Summary ID: CVE-2025-61757 Product: Oracle Identity Manager Oracle Fusion Middleware Component: REST WebServices Affected Versions: 12.2.1.4.0 & 14.1.2.1.0 Severity: 🔴 Critical — 9.8 CVSS 3.1 Published: Oct 21, 2025 Type: Missing Authentication for Critic...

CVE-2025-55182

What is CVE-2025-55182? Also known as React2Shell, this vulnerability refers to a structural flaw in React Server Components where prototype pollution occurs during data deserialization, enabling RCE. Affected versions are React 19.0.0, 19.1.0, 19.1.1, 19.2.0, Next.js 15.x 15.0.0 15.5.6, 16.x...

CVE-2024-53924

CVE-2024-53924 Description: Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IFA1=200, eval"import'os'.system substring. Author: Adham Elmosalamy @aelmo Date of Disclosure: November 23, 2024...

CVE-2024-44346

CVE Disclosure: CVE-2024-44346 Date: 13-09-2024 Summary A vulnerability was identified in Tosibox tbsetup.exe version 4.0.0.0 , which could allow local privilege escalation . This issue has been assigned the identifier CVE-2024-44346 .The vendor has released an advisory with further details and...

Spring4Shell

Spring RCE CVE-2022-22965 Vulnerability Environment Environment Information springboot jdk11 tomcat9.0.30 payload Request Header Configuration "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Request Body Data...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution RCE in Apache Tomcat. This vulnerability works on versions 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81. Tested only on 8.0.24. Vulnerability uses misconfigured PUT option on the...

cve-2020-0796

Identifying and Mitigating the CVE-2020–0796 flaw in the fly CVE-2020–0796, is pre-remote code execution vulnerability that resides in the Server Message Block 3.0 SMBv3 network communication protocol, which Microsoft will not address the issue as the part of the March 2020 Tuesday. Usage python3...

CVE-2025-24893

CVE-2025-24893 XWiki Platform is a generic wiki platform that provides runtime services for applications built on top of it. Due to a vulnerability in the SolrSearch endpoint, an unauthenticated user can achieve arbitrary remote code execution. This vulnerability affects the confidentiality,...

CVE-2026-24061

CVE-2026-24061 Telnet RCE Exploit - By SafeBreach Labs This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable. Usage Run the script with a target host: python telnetrce.py -p Arguments host: Target IP address or hostname required -p,...

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Wing FTP Server RCE Exploit This repository provides a proof-of-concept exploit for CVE-2025-47812 , a remote command execution RCE vulnerability in Wing FTP Server. An attacker can inject and execute arbitrary Lua-based system commands by abusing the username parameter during...

CVE-2024-32002-poc

Bash Script: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Reproduction Guide Disclaimer ⚠️ This tool is for security research and educational purposes only. Do not use it for illegal activities. ⚠️ Vulnerability Overview CVE-2025-55182 is a critical remote code execution RCE vulnerability in the Next.js framework. This...

CVE-2020-17496

CVE-2020-17496 POST /ajax/render/widgettabbedcontainertabpanel?XDEBUGSESSIONSTART=phpstorm HTTP/1.1 Host: localhost User-Agent: curl/7.54.0 Accept: / Content-Length: 100 Content-Type: application/x-www-form-urlencoded subWidgets0template=widgetphp&subWidgets0configcode=echo shellexec"pwd"; exit;...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

CVE-2026-66492

Path Traversal in File Upload Destination PhocaCommander ≤ 6.1.3 — Authenticated Admin Writes Files Outside Webroot SUMMARY The file upload handler in PhocaCommander constructs the destination path from an attacker-controlled base64-encoded folder parameter without any path containment validation...

WBCE-CMS-Stored-XSS---Pages-Menu

WBCE CMS Stored XSS v1.6.1 Author: Sergio Description: WBCE CMS 1.6.1 is affected by a Cross-Site stored scripting XSS vulnerability that allows attackers to execute arbitrary code via a payload crafted in the Intro Page parameter in the Pages menu. The payload will be executed on the main page...

Assignement_3-CVE-2017-7269

CVE-2017-7269 Name : Killian Munt-Buron and Naji Ullah Abbasi Description of the CVE CVE-2017-7269 is a buffer overflow vulnerability in Microsoft Windows Server 2003 R2. The vulnerability is in the ScStoragePathFromUrl function in the WebDAV. This vulnerability allows to execute arbitrary code v...

CVE-2024-28397-js2py-Sandbox-Escape

Introduction 中文 js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javscript code on websites. There is a vulnerability in the implementation of global variables within js2py, which could allow an attacker...