CVE-2025-64087-SSTI-

CVE-2025-64087 SSTI FreeMarker Server-Side Template Injection SSTI in XDocReport allows Remote Code Execution via Apache FreeMarker engine Bug Definition Overview of the vulnerability Server-Side Template Injection SSTI is a web security vulnerability that allows attackers to inject malicious cod...

CVE-2020-0796

CVE-2020-0796 SMBv3 RCE vulnerability in SMBv3 Windows 10 is vulnerable Windows 2008 Not vulnerable Detection Script...

CVE-2019-11932

CVE-2019-11932 The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: notroot@osboxes:/Desktop/gif$ make...

CVE-2024-5932

This post is a research article published by EQSTLab. ❗❗ IMPORTANT ❗❗ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...

CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn Write-up Date: June 05, 2026 Difficulty: Easy Platform: HackTheBox Key Techniques: Port & Service Enumeration, Directory Fuzzing Gobuster, File Upload Evasion, HTTP Request Manipulation Burp Suite, Remote Code Execution RCE, Advanced TTY Shell Stabilization Python, Local...

CVE-2019-11580

CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE Usage: python CVE-2019-11580.py http://xx.xx.xx.xx/ Crowd-2.11.0 VulnVersion Donwload https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz Powered by Atlassian Crowd Version: 2.11.0 Build:725 -...

CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authenticated Command Injection in Configuration Wizard Simple proof of concept repository for CVE-2025-34227, an authenticated command injection in Nagios XI - Configuration Wizard Full writeup here: https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/...

sophucked

sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth. Implemented this quickly as it was needed to unify some threat magnets. Example Use: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + starting handler on port 80 + Sending callback to x.x.x.x:80 + connection from x.x.x.x + pop t...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

CVE-2025-55182-POC-NEXTJS

CVE-2025-55182 React2Shell - Proof of Concept PoC This is a commercial, non-free Proof-of-Concept. Purchase Link: https://bit.ly/44G0ani Overview This repository contains a reliable, high-fidelity Proof-of-Concept PoC exploit for CVE-2025-55182 , also known as React2Shell. This is a critical CVSS...

dubiousdisk

dubious disk - the porygon-z that's super effective against secure boot! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more... Overly permissive code in the Windows boot environment allows for overwriting arbitrary memory, and therefore, arbitrary code execution. Exploitro...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...

CVE-2018-15877-RCE

CVE-2018-15877-RCE RCE via the Planview Activity Monitor plugin for wordpress. Requirements: Python3 Selenium Usage: ./exploit.py...

CVE-2022-28590

CVE-2022-28590 The original discovery and manual PoC is from tuando243: A Remote Code Execution RCE vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=installtheme. This PoC uploads a simple webshell for further remote code execution. This exploit expects from the server that...

CVE-2021-26855-CVE-2021-27065

CVE-2021-26855-CVE-2021-27065 analytics ProxyLogo Mail exchange RCE...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ This exploit builds upon the foundational work available at https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE. We have further developed the technique to achieve a reverse shell utilizing the Metasploit Framework...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker ! Problem There are currently some problems: 1. If yakit proxy is not used,...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...