CVE-2023-6553

CVE-2023-6553 Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress This is a critical CVE with a CVSS score of 9.8 The vulnerability allows attacker to send commands to the server running the vulnerable version of the plugin Vulnerable Version Backup = 1.3.7 Set up 1. git clone the...

CVE-2024-23780

CVE-2024-23780 Exploit for Netbox This script exploits CVE-2024-23780, which allows remote code execution RCE on Netbox instances. Usage python netboxexploit.py --url --username --password Parameters --url: URL of the Netbox instance. --username: Username for authentication with the Netbox...

CVE-2017-7494_IT19115344

CVE-2017-7494IT19115344 A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root...

CVE-2023-47464

GL-AX1800 Router Security Assessment Report Overview This report outlines the findings of a comprehensive security assessment conducted on the GL-AX1800 router manufactured by GL.iNet. The assessment aimed to identify potential vulnerabilities and weaknesses in the device's security measures...

CVE-2022-36234

Descripción de CVE-2022-36234 Se descubrió que la confirmación 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 del Servidor TCP SimpleNetwork contiene una vulnerabilidad de doble liberación double free que se explota mediante paquetes TCP manipulados. Provocar la doble liberación permitirá a los cliente...

Strapi-RCE

Strapi-RCE Script de explotación que muestra una combinación de CVE-2019-18818 y CVE-2019-19609 para la ejecución remota de código no autenticada en Strapi CMS. Exploit Este script explota una vulnerabilidad en Strapi CMS versiones 3.0.0-beta.17.4 y anteriores, permitiendo la ejecución remota de...

CVE-2016-2173

CVE-2016-2173 - Ejecución Remota de Código en Spring AMQP - Prueba de Aplicación Descripción La clase org.springframework.core.serializer.DefaultDeserializer no valida el objeto deserializado contra una lista blanca. Al suministrar un objeto serializado manipulado, como el gadget de Commons...

CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Telnet RCE Exploit For Linux MacOS Windows CVE-2026-24061 Telnet RCE 1.9.3 = GNU Inetutils = 2.7 Usage: go-telnet-exploit -p Check Exploit...

CVE-2024-53900

CTF Challenge - Mongoose RCE CVE-2024-53900 Challenge Overview This Capture The Flag CTF challenge is based on CVE-2024-53900, a vulnerability in Mongoose that allows Remote Code Execution RCE due to improper use of the $where operator in MongoDB queries. Your objective is to exploit this...

firefox-rce-nssmil

ثغرة Firefox RCE CVE-2016-9079 – نسخة تعليمية بلغة JavaScript تنفيذ تعليمي للاستغلال العام لـ CVE-2016-9079، مأخوذ من الوحدة الأصلية في Exploit-DB/Metasploit لاستخدام مستقل. إخلاء مسؤولية هذا المستودع يُقدم لأغراض تعليمية وبحثية فقط. يحتوي على نسخة بلغة JavaScript من استغلال عام متاح لدراسة تقنيا...

firefox-rce-nssmil

Firefox RCE CVE-2016-9079 – Educational JavaScript Port Educational implementation of the public exploit for CVE-2016-9079, adapted from the original Exploit-DB/Metasploit module for standalone use. Disclaimer This repository is provided strictly for educational and research purposes. It contains...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve를 통한 디렉터리 보호 우회 → PUT 기반 RCE🚨🚨 요약 CVE-2025-55752는 버그 60013을 수정하는 과정에서 Apache Tomcat에 도입된 보안 회귀regression입니다. Rewrite Valve가 사용될 때 Tomcat은 URL 디코딩 전에 경로 정규화path normalization를 적용합니다. 이 잘못된 순서로 인해 조작된 URI가 /WEB-INF/ 및 /META-INF/와 같은 보호 경로에 대해...

CVE-2023-25136

CVE-2023-25136 Escaneo masivo y explotación de la vulnerabilidad OpenSSH 9.1 Detalles de la vulnerabilidad OpenSSH es un software que implementa el protocolo SSH, comúnmente utilizado para conectarse de forma segura a máquinas Linux o Windows para realizar administración remota. La vulnerabilidad...

ezwinrar

ezwinrar Herramienta Python que explota CVE-2018-20250 encontrada por el equipo de CheckPoint: https://research.checkpoint.com/extracting-code-execution-from-winrar/ Al manipular el campo del nombre de archivo del formato ACE, se ignora la carpeta de destino carpeta de extracción y la ruta relati...

LuCI_RCE_exp

EXP de CVE-2019-12272 CVE-2019-12272 es una vulnerabilidad de LuCI para ejecutar código bash arbitrario. Detalles https://hachp1.github.io/posts/Web%E5%AE%89%E5%85%A8/20190710-lucirce.html Uso python .\cve-2019-12272bandwidthstatus.py -a 192.168.153.4 -u root -p root -c ls python...

CVE-2020-27955

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

CVE-2020-23934

CVE-2020-23934 References 1 https://www.exploit-db.com/exploits/48636 2 https://github.com/vj0shii/PRTG-Network-MonitorCMS-Authenticated-Remote-Code-Execution/blob/master/PRTGCMS.py 3 https://stackoverflow.com/questions/12385179/how-to-send-a-multipart-form-data-with-requests-in-python 4...

clone_and_pwn

Headers Exploit Title: Clone and Pwn Date: June 4th, 2018 Exploit Author: Alejandro Caceres Vendor Homepage: https://git-scm.com/ Software Link: https://git-scm.com/downloads Version: arbitrary code is executed on git client versions In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15....

CVE-2017-11882

CVE-2017-11882 El script original proviene de https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Investigación:...

Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.

SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...