CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

CVE-2023-22515_RCE

A way to achieve RCE after obtaining backend permissions in Confluence Manual GetShell Steps You can upload custom plugins in the backend to achieve RCE Access plugins/servlet/com.jsos.shell/ShellServlet...

CVE-2025-1974

README Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1. Change the ip in shell.c 2. Check the docker is available and run make shell.so. We need to build so in alpine to make sure it can works in...

CVE-2025-3248-Langflow-RCE

mitsec - CVE-2025-3248 Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features Remote and unauthenticated RCE No authentication required Python3 one-liner script Colorized terminal...

CVE-2022-41544

CVE-2022-41544 Exploit script for CVE-2022-41544 - RCE in get-simple CMS Usage Usage: python3 CVE-2022-41544.py Example...

CVE-2026-24061_POC

CVE-2026-24061 GNU Telnetd RCE معلمات السكربت...

CVE-2022-42475-POC

CVE-2022-42475 Antecedentes Este es el exploit para la entrada del blog aquí: https://bishopfox.com/blog/exploit-cve-2022-42475 Versión Redactada Esta versión del exploit no funcionará sin que tú, el hacker, proporciones las direcciones de memoria necesarias para los gadgets ROP, etc. El trabajo...

CVE-2026-20841

CVE-2026-20841 - Windows 메모장 원격 코드 실행 RCE 보안 연구 및 기술 분석 저장소 ⚠️ 이 저장소는 교육, 방어 및 연구 목적으로만 제공됩니다. 📖 개요 CVE-2026-20841 은 Microsoft Windows 메모장의 Markdown 처리 기능에 영향을 미치는 심각한 원격 코드 실행RCE 취약점입니다. 공격자는 취약한 버전의 Windows 메모장에서 특수하게 조작된 파일을 열 경우 임의 코드 실행을 유발할 수 있습니다. 영향 원격 코드 실행 RCE 임의 코드 실행 사용자 수준 손상 가능성 보안 경...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly 미들웨어 API 원격 코드 실행 Hoverfly ≤ 1.11.3에서 OS 명령 주입을 통한 인증된 RCE 취약점 개요...

CVE-2025-3248

CVE-2025-3248 — Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features 🔓 Remote & unauthenticated RCE 🔐 No authentication required 🐍 Python3 one-liner script 🎨 Colorized terminal...

CVE-2023-41892

CVE-2023-41892 - Craft CMS Remote Code Execution RCE referensi: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2023-36845

CVE-2023-36845 Utilisation ? bash cve.sh yourfile.txt Références : https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE عبر واجهة Jolokia API الوصف CVE-2026-34197 هي ثغرة تنفيذ أوامر عن بُعد RCE في Apache ActiveMQ Classic تسمح للمهاجم بتنفيذ أوامر عشوائية على نظام تشغيل الخادم عبر واجهة Jolokia API المكشوفة في وحدة التحكم الويب. الضعف موجود منذ أكثر من 13 عامًا ويقع في التفاعل...

CVE-2020-27955

Reproduction de la vulnérabilité CVE-2020-27955 1、Sur la machine Windows, téléchargez la version vulnérable de Git-LFS Lien de téléchargement : https://github.com/git-for-windows/git/releases/tag/v2.29.2.windows.1 2、Sur la machine Windows, installez-le, puis ajoutez les informations suivantes au...

CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA वेब सर्वर फ़ाइल अपलोड भेद्यता सारांश SpiderControl SCADA वेब सर्वर अनधिकृत मनमानी फ़ाइल अपलोड के प्रति संवेदनशील है, जिससे हमलावर दुर्भावनापूर्ण स्क्रिप्ट जैसे, वेब शेल अपलोड कर सकते हैं और दूरस्थ कोड निष्पादन प्राप्त कर सकते हैं। CVE आईडी : CVE-2024-8232...

CVE-2017-9805

परीक्षण nuclei CVE-2017-9805.yaml - struts2 showcase RCE Dockerfile बनाएँ docker build -t cve-2017-9805 . कंटेनर प्रारंभ करें और अलग करें docker run --name cve-2017-9805 -p 127.0.0.1:8080:8080 -dit cve-2017-9805 /bin/bash चल रहे कंटेनर में लॉगिन करें docker exec -it cve-2017-9805 /bin/bash Tomcat...

Malicious code in vitest-cli-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1262dc722ebac3b91301efde91e61df9ec9f65ccf91e51c15da53f9b518878b2 Package published as vitest-cli-pro ships a verbatim copy of nodemailer as cover; its declared postinstall runs lib/utils/index.js, which detaches a...

CVE-2026-33017

CVE-2025-62593 — Эксплойт неаутентифицированного RCE в Ray Обзор CVE-2025-62593 — это уязвимость неаутентифицированного удалённого выполнения кода в распределённом AI-движке вычислений Ray. Корневая причина — отсутствие аутентификации на критических HTTP-эндпоинтах /api/jobs, /api/jobagent/jobs...

CVE-2018-11235

CVE-2018-11235 Getting started To build the Docker containers, use: root@kitploit: make docker The following make commands must be run in parallel on different terminals from your machine To start the attacker server container, use: root@kitploit: make runserver to start the victim container, use...

yaml-payload-2

yaml-payload حمولة استغلال إلغاء تسلسل SnakeYAML لثغرة CVE-2022-1471 ، مقتبسة من artsploit/yaml-payload مبنية أصلاً على mbechler/marshalsec. ماذا تفعل عند تحميلها عبر Yaml.load غير الآمن في SnakeYAML، تقوم هذه الحمولة بالسيطرة على التطبيق قيد التشغيل واستبداله بصفحة "You've Been PWNED": 1. تحقن...