CVE-2017-8759_-SOAP_WSDL

What is CVE-2017-8759 is Remote Code Execution Vulnerability On SOAP WDSL A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an...

CVE-2024-35333

CVE-2024-35333 A stack buffer overflow vulnerability exists in the charset handling functionality of html2xhtml version 1.3. An attacker can exploit this vulnerability by providing a specially crafted input, which would lead to the overflow of the 'buf' variable located on the stack. Successful...

CVE-2017-5638

CVE-2017-5638 The Apache Struts 2 versions 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 have a flaw in their Jakarta Multipart parser. This flaw causes incorrect handling of exceptions and generation of error messages when attempting to upload files. As a result, attackers can remotely execute...

cve-2024-7646

CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...

GO-2026-6897 imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxy

imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxy...

CVE-2025-46811

SUSE Manager Exploit Toolkit CVE-CVE-2025-46811 Scanner & Exploiter 🚀 Features Multi-threaded vulnerability scanning Interactive root shell via WebSocket Single command execution mode Colored debug output Batch processing of targets 📦 Installation git clone...

react2shell

React2Shell A CLI tool to exploit prototype pollution vulnerabilities in React Server Components / Server Actions CVE-2025-55182 & CVE-2025-66478, enabling remote code execution RCE on vulnerable servers. Original PoC : https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc WARNING:...

SMBGhost

SMBGhost Batch test CVE-2020-0796 - SMBv3 RCE...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

CVE-2024-7954

CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution RCE Exploit This script exploits a Remote Code Execution vulnerability in SPIP version 4.2.8 via the porteplumeprevisu endpoint. The vulnerability allows unauthenticated attackers to inject PHP code through preview rendering of crafted image tag...

CVE-2003-0264-SLmail-5.5

CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 Buffer Overflow References https://vulners.com/cve/CVE-2003-0264 Vulnerability SLMail has no bounds checking when submitting a POP3 password. As a result, you can execute arbitrary code by submitting a long, malformed POP3 PASS to the SLMail server...

CVE-2023-46870

CVE-2023-46870 Nordic Semiconductor nRF Sniffer for Bluetooth LE versions 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have incorrect file permissions set, which allows adversaries to perform privilege escalation and code execution by modifying bash and python scripts. Keywords: Local Privilege Escalati...

laravel-rce-cve-2018-15133

laravel-rce-cve-2018-15133 CVE-2018-15133...

log4shell-minecraft-demo

Log4Shell CVE-2021-44228 minecraft demo This demo is used at education fairs to give potential future students an idea of the cybersecurity department at HTL Villach and on how everyday applications can be exploited Note: This entire demo uses Minecraft 1.8.8 Attacker The attacker in this scenari...

CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH

CVE-2024-6387: Race Condition in Signal Handling for OpenSSH Overview CVE-2024-6387 is a critical vulnerability discovered in OpenSSH's server sshd that allows an attacker to potentially achieve unauthenticated remote code execution RCE as root. The vulnerability arises from a race condition in t...

CVE-2022-20699

CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...

CVE-2024-32002-poc

Bash Script: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize...

CVE-2019-16113

Bludit 3.9.2 - Remote command execution - CVE-2019-16113 This exploit combines two exploits in Bludit CMS 3.9.2 to gain remote code execution on the target system. The original exploits are CVE-2019-17240 & CVE-2019-16113. Features Bruteforce password + RCE Bruteforce username:password + RCE...

TryHack3M-Bricks-Heist

target:10.201.6.98 enumeration nmap -A 10.201.6.98 since there is a wordpress with name "brick by brick" and the name of this room is brick it is probably where we can find vulnerability so lets enumerate wordpress wpscan --url https://bricks.thm --disable-tls-checks running with tls-checks wont...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...