CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763 - FuelCMS = 1.4.1 RCE Exploit to trigger RCE for CVE-2018-16763 on FuelCMS = 1.4.1 and interactive shell. Features Automatically uploads a php webshell API in FuelCMS using CVE-2018-16763. Execute system commands via an API with ?action=exec. Download files from the remote system t...

idaguides

IDA Guides Small plugin for IDA that adds indent guides to the decompiler view. Installation 1. Clone or download this repository 2. Extract it's contents to your IDA plugins directory 3. Restart IDA Tested With IDA 9.2, 9.3...

CVE-2023-22515_RCE

A way to achieve RCE after obtaining backend permissions in Confluence Manual GetShell Steps You can upload custom plugins in the backend to achieve RCE Access plugins/servlet/com.jsos.shell/ShellServlet...

WhatsAppHACK-RCE

WhatsAppHACK-RCE...

Android-Projector-C2-Malware

Pre-installed C2 Infrastructure and RAT Payload on Android Projectors Technical Analysis Report — Security Research Affected Devices: Multiple Android projectors of projector brands like the Nonete e.g., Model HY260Pro likely also several projectors from Magcubic, Hotack, Huyukang and many more, ...

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a crafted payload in to the Global Content Blocks in the Administration Menu. Attack Vectors:...

CVE-2019-0887

CVE-2019-0887 Compile the CVE-2019-0887, rename to winhlp.dll Compile the InstallHook, rename to hook.exe be careful, they must be compile with x64 Put then into the evil system just like that c:\windows\hook.exe c:\windows\winhlp.dll c:\windows\winhlp64.exe something evil if somebody want to...

CVE-2024-38856_Scanner

CVE-2024-38856 For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your responsibility. CVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit The CVE Analysis: https://blog.securelayer7.net/cve-2024-38856-apache-ofbiz-rce This issue affects Apache...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...

CVE-2020-15148-bypasses

CVE-2020-15148-bypasses Several bypasses for CVE-2020-15148 Yii2 deserialization poc1 This one is exploitable in version 2.0.37, fixed in 2.0.38, which was assigned CVE-2020-15148. The following three are bypasses. checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction...

cve-2019-16278

CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...

CVE-2018-6574

CVE-2018-6574 Steps to reproduce: 1. Create a .c file containing the malicious command revshell: include include static void malicious attributeconstructor; void malicious system""; 2. Compile it using GCC. You must compile it on the exact architecture and OS as the target e.g. Linux x8664: gcc...

CVE-2021-44228

CVE-2021-44228-POC Yet another CVE-2021-44228 POC Affected Log4j versions: from 2.0-beta9 up to 2.14.1 Prerequisites Used Java: OpenJDK 11 https://jdk.java.net/archive/ Maven required to build apps in this repo alternatively, download prepared jar files from release: https://maven.apache.org/...

CVE-2026-9147-uproot-rce

CVE-2026-9147: uproot Code Injection via TStreamerInfo Metadata Severity: High, CVSS 4.0 8.5 , CVSS 3.1 7.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: uproot = 5.7....

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

SHGenOb

SHGenOB: Shellcode Generator from PIC C Code Introduction SHGenOB is a Python-based tool designed to generate shellcode from Position Independent Code PIC written in C. It automates the process of compiling C code, extracting the .text section, and optionally encrypting the resulting shellcode...

Admin-Panel_Finder

Admin Panel Finder A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this...

WHS3_vulhub

CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC 정수진@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...

CVE-2019-5624

CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...

CVE-2025-55182-exp

CVE-2025-55182-exp 🔥 Overview CVE-2025-55182 is a critical Remote Code Execution RCE vulnerability in React Server Components RSC affecting Next.js applications using App Router with Server Actions. The vulnerability exists in the Flight protocol deserialization process, allowing attackers to...