CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Remote Code Execution on Confluence Servers. Dork Fofa: app="ATLASSIAN-Confluence" Usage Show help information. python PoC.py Vulnerability verification for individual websites. python PoC.py -u https://1.1.1.1 Command execution. python PoC.py -u https://1.1.1.1 -e...

CVE-2024-3660-PoC

CVE-2024-3660 – TensorFlow Keras Arbitrary Code Execution via Malicious Model Overview CVE-2024-3660 is an arbitrary code execution vulnerability in TensorFlow's Keras framework affecting versions \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp...

CVE-2024-34102

CVE-2024-34102 ★ Thanks to @th3gokul, Sanjaith3hacker, Chocapikk for the original code base. ★ Description CVE-2024-34102 : Adobe Commerce XXE vulnerability description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation as he did not solv...

CVE-2022-30190

CVE-2022-30190 Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability MSRC / By msrc / May 30, 2022 On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. A remote code execution vulnerability...

potential-cassandra

CVE-2024-23114 Prepare the enviroment We'll need a Mysql instance docker run --rm -d --name cassandra -p 9042:9042 cassandr Now we'll need to create the required tables: You have two files: employee.sql and employeecompleted.sql Run the following command: docker exec -it cassandra bash...

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Lab Setup docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000 Description Versions of the package...

CVE-2025-49113

CVE-2025-49113 RCE exploit the method for username/password authentication in this Exploit comes in 4 steps the code is a bit messy...

CVE-2023-47268

PrusaSlicer Arbitrary Code Execution Priv Esc using a .3mf file with vulnerable prusaslicer version. Make sure you can run prusaslicer using sudo. Linux 1.Download the files 2.Change IP and PORT in exploit.sh 3.Make sure to have exploit.sh on /tmp directory 4.Execute the following command sudo...

CVE-2019-16724

Vulnerability Description File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter. This exploit was tested on windows 7 Home. It will certainly break when on other...

CVE-2024-29988-exploit

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...

CVE-2024-4367-POC

CVE-2024-4367 POC Usage python poc.py malicious.pdf "alert'S4vvy'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

ProxyLogon

ProxyLogon For Python3 ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists user's mail. --mail...

CVE-2024-41817-poc

ImageMagick Arbitrary Code Execution CVE-2024-41817 Proof of Concept exploit for ImageMagick versions = 9.4.0 Python packages: paramiko Installation git clone https://github.com/Dxsk/CVE-2024-41817-poc/ cd CVE-2024-41817-poc pip install -r requirements.txt Usage Auto-detect vulnerable version:...

CVE-2019-10392_EXP

CVE-2019-10392EXP Jenkins Git Client Authenticated RCE CVE-2019-10392Exp Usage usage: Jenkins Git Client 2.8.2. -h -u TARGET -U USERNAME -P PASSWORD -i ITEM -I INTERACTIVE -c COMMAND optional arguments: -h, --help show this help message and exit -u TARGET, --target TARGET Target. -U USERNAME,...

CVE-2025-48595-Android-Framework-Integer-Overflow-

CVE-2025-48595 - Android Framework Integer Overflow Vulnerability Description CVE-2025-48595 is an integer overflow vulnerability in multiple locations of the Android Framework. This flaw allows code execution leading to local privilege escalation without requiring additional execution privileges...

CVE-2022-26134

POC - Atlassian Confluence OGNL Injection Remote Code Execution RCE Vulnerability CVE-2022-26134 Tested on Confluence Version 7.13.6 Setting up environment Clone the repository docker-compose up -d On http://localhost:8090 you shall see confluence up and running. Next, get an evaluation license f...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 dork on shodan https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 Curl poc curl -v...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...