OgnlContentTypeRejectorValve

OgnlContentTypeRejectorValva This is Valve for Tomcat7 to block Struts 2 Remote Code Execution vulnerability CVE-2017-5638...

CVE-2025-3054-Exploit

CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...

CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF leading to RCE This bug allows a remote website to create and start an arbitrary docker container on machines running Che before versions 7.3.0 and 7.4.1 when a user visits a webpage. Vulnerability This is a CSRF bug that allows a remote website to create and start...

CVE-2022-25226

ThinVNC 1.0b1 - Authentication Bypass to Remote Code Execution CVE-2022-25226 Author: krill-x7 Reference: https://fluidattacks.com/advisories/sinatra Overview ThinVNC 1.0b1 contains an authentication bypass vulnerability CVE-2022-25226 allowing remote attackers to interact with the backend...

CVE-2025-53770-Exploit

CVE-2025-53770-Exploit First, get the VIEWSTATEGENERATOR, VALIDATIONKEY, VALIDATIONALG value from the target SharePoint page: curl -s https://target.com/layouts/15/start.aspx | grep -oP 'VIEWSTATEGENERATOR" value="\K^"+' curl https://target.com/layouts/15/spinstall0.aspx Then, create a PowerShell...

GHSA-CG8M-R9F2-5WM2 Black: GitHub Action installs unvalidated required-version from pyproject.toml

Summary The GitHub Action bundled with Black can read the version from tool.black.required-version if usepyproject is set to True. This version is not validated and therefore can be used to execute untrusted code in the context of a victim's repository. Details This is similar to the previous...

Black: GitHub Action installs unvalidated required-version from pyproject.toml

Summary The GitHub Action bundled with Black can read the version from tool.black.required-version if usepyproject is set to True. This version is not validated and therefore can be used to execute untrusted code in the context of a victim's repository. Details This is similar to the previous...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-ioc Were you hit by PHP2Shell? A read-only triage...

n8n-cve-2025-68613

CVE-2025-68613 – n8n Expression Injection RCE Toolkit ini menyediakan scanner dan exploit PoC untuk kerentanan kritis CVE-2025-68613 pada n8n Workflow Automation Platform. This repository provides scanner and exploit PoC scripts for the critical CVE-2025-68613 vulnerability affecting n8n Workflow...

CVE-2026-51954

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirecturi...

CVE-2025-49844

CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...

CVE-2025-64424-Coolify-

Coolify CVE-2025-64424 RCE Vulnerability Lab Lesson Plan: Red74-Coolio-CVE-2025-64424 Disclaimer: This repository contains a deliberately vulnerable version of Coolify and is intended for educational purposes, CTF environments, and cybersecurity training. Do not deploy this in a production...

wp-file-manager

wp-file-manager WP File Manager 6.9 - Arbitrary File Upload leading to RCE usage: wp-file-manager.py -h -u URL -f FILE optional arguments: -h, --help show this help message and exit -u URL, --url URL URL of host to check will need http or https -f FILE, --file FILE File of URLS to check + Testing...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 A streamlined Bash exploit for CVE-2023-27350. This script automates authentication bypass, environment preparation, and command injection via the PaperCut printer scripting engine. Visual Proof Basic rce: Triggering a reverse shell: Quick Start Clone the...

react2shell-security-toolkit

🛡️ React2Shell Security Toolkit Security toolkit to detect and mitigate CVE-2025-55182 React2Shell vulnerability ⚠️ CRITICAL : This vulnerability CVSS 10.0 is being actively exploited! Quick Start npm install -g react2shell-security-toolkit npx react2shell-check What is CVE-2025-55182? Remote code...

CVE-2023-42793

CVE-2023-42793 For educational purposes only PoC for CVE-2023-42793 Usage CVE-2023-42793admin.sh: chmod +x CVE-2023-42793admin.sh ./CVE-2023-42793admin.sh ip/domainname port Proof of working: Usage CVE-2023-42793rce.sh: chmod +x CVE-2023-42793rce.sh ./CVE-2023-42793rce.sh ip/domainname port comma...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Redis UAF Proof of Concept Use-After-Free in RedisunblockClientOnKey leading to Remote Code Execution Proof of concept with GDB‑assisted exploitation educational / lab use only 📖 Overview CVE-2026-23479 is a critical Use‑After‑Free UAF vulnerability in Redis versions 7.2.0...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Exploitation of Remote Code Execution Vulnerability CVE-2024-7954 Software Vulnerability Testing Project Submitted by: Shivansh Kuntal Overview This project demonstrates the exploitation of CVE-2024-7954 , a critical Remote Code Execution RCE vulnerability affecting SPIP CMS through its porteplum...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticated Update Remote Code Execution Vulnerability Usage: python3 cve-2022-24644poc.py Details in the report at gerr.re. Steps to reproduce 1. Install KeyMouse Windows 3.08; 2. Set spoof www.keymouse.com to our attacker ip; For the...