detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...

xmlrpc-common-deserialization

xmlrpc-common deserialization vulnerability This note is a technical note to detail the root cause and the associated exploit. You can find the initial disclosure here. The associated CVE is CVE-2019-17570. Description xmlrpc-common forms a shared code base between xmlrpc-client and xmlrpc-server...

CVE-2020-10199-Nexus-3.21.01

CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Remote Code Execution Authenticated - Updated This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit https://www.exploit-db.com/exploits/49385 Change the user,password,URL and CMD...

cve-2024-0305exp

cve-2024-0305exp Available exp for cve-2024-0305, please credit the source if referenced, thank you! 0x01 Product Background Ncast High-Definition Intelligent Recording & Broadcasting System is a product of Guangzhou Encast Electronic Technology Co., Ltd. This system has an RCE vulnerability that...

threat-intel-cve-2024-3094

Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...

CNTA-2019-0014xCVE-2019-2725

CNTA-2019-0014-CVE-2019-2725 Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited. Usage:python3 weblogicrce.py url command is echo? win or linux For detailed analysis, please visit: https://icematcha.win/?p=1174...

CVE-2024-27956-RCE

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...

CVE-2022-1388

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage bash / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / /...

CVE-2024-7120-Exploit-by-Dark-07x

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

PoC-CVE-2019-10743

Zip Slip Demo This project demonstrates the Zip Slip vulnerability CVE-2019-10743 using the vulnerable version of the mholt/archiver package. What is Zip Slip? Zip Slip is vulnerability that was uncovered by the security researchers from Snyk. It was found that the vulnerability is impacting...

CVE-2025-25257

Table of Contents Overview Vulnerability Details Proof of Concept PoC Trolled2 Trolled3 Overview CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. This flaw allows attackers to inject malicious SQL commands into th...

go-get-rce

This repository does not have a README...

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution RCE...

citrix_dir_traversal_rce

citrixdirtraversalrce A directory traversal was discovered in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. When the NSPPE receives a request for GET /vpn/index.html, it is supposed to send this request to Apache, which processes it...

IngressNightmare-RCE-POC

⚠️ Critical RCE in Ingress-NGINX via Configuration Injection CVE-2025-1974 and more This repository contains a proof-of-concept PoC exploit for CVE-2025-1974 , a Critical CVSS 9.8 vulnerability in the Ingress-NGINX controller for Kubernetes. This flaw allows unauthenticated remote code execution...

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

CVE-2025-48384-RCE

CVE-2025-48384-RCE...

RCE-in-Spring-Cloud-CVE-2022-22963

Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: $ nc -lvnp 9001 Run the exploit example with default port 9001 on attacker host: $...

Additive-Vulnerability-Analysis-CVE-2021-41773

Additive-Vulnerability-Analysis-CVE-2021-41773 Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution...

bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay

A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol UDP message signed with Generic Security Service Transaction Signature GSS-TSIG can replay it while the...