1283296 matches found
CVE-2025-49844
CVE-2025-49844 - RediShell Use-after-free in Redis Lua scripting leading to remote code execution. Summary of the CVE Redis is an open source, in-memory database. CVE-2025-49844 is a use-after-free vulnerability in Redis's embedded Lua scripting engine. An authenticated user with access to Lua...
Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-
Remote Code Execution – CVE-2024-28397 pyload-ng / js2py This repository contains a Proof-of-Concept PoC exploit for CVE-2024-28397 , a Remote Code Execution vulnerability affecting pyload-ng due to insecure usage of js2py. Disclaimer: This PoC is for educational and research purposes only. Do no...
CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-
CVE-2025-64512 - pdfminer.six Remote Code Execution RCE -orange WARNING – EDUCATIONAL USE ONLY This proof-of-concept is for authorized security testing and educational purposes only. Use only on systems you own or have explicit written permission to test. The author is not responsible for any...
spring-RCE-CVE-2022-22965
Vulnerability Overview Recently, Spring released a major CVE vulnerability. The CVE information states: "A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as ...
CVE-2022-26134
CVE-2022-26134 Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability Summary| CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability in Confluence Server and Data Center ---|--- Affected Products|...
CVE-2017-11882
CVE-2017-11882 Empire Port of CVE-2017-11882 Code shifted to another parent repository. Redirect?...
CVE-2025-25620
CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored Cross-Site Scripting XSS in the "Create Assignment" function, allowing attackers to execute malicious scripts in the context of other users' sessions. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2:...
drupal-cve-2018-7600-poc
README Drupal Drupalgeddon 2 Unauthenticated Remote Code Execution CVE-2018-7600 Drupal versions prior to 7.58, 8.x versions prior to 8.3.9, 8.4.x versions prior to 8.4.6, and 8.5.x versions prior to 8.5.1 allow remote attackers to execute arbitrary code due to an issue affecting multiple...
-CVE-2014-6271
/ || | | | | | | | / || | | |/ \ / | |/ / \ | || | | | | | | \ | || | | | | | | ' / | | || || | | | || | || . \ |/|| |||||/|| ||/ ||\ CVE-2014-6271 — Shellshock Remote Code Execution via Bash Environment Variable Injection "A flaw hidden in Bash for decades that shook the foundations of the...
CVE-2023-50596
CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...
CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability
CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...
CVE-2018-6574-go-get-RCE
This repository does not have a README...
CVE-2022-39197-POC
CVE-2022-39197-POC Chinese version READMECN.md Vulnerability Intro According to the Update Log of the latest version 4.7.1 officially released by CobaltStrike on 20 September, teamserver version We were contacted by an independent researcher named "Beichendream" to inform us of an XSS vulnerabili...
CVE-2022-30190
Exploitation of Follina CVE-2022-30190 Follina CVE-2022-30190 is a critical remote code execution RCE vulnerability that affects the Microsoft Support Diagnostic Tool MSDT. This flaw was originally discovered through a malicious file detected on VirusTotal and was named by researcher Kevin...
CVE-2023-44758_GDidees-CMS-Stored-XSS---Title
GDidees Stored XSS v3.0 Author: Sergio Description: Cross Site Scripting vulnerability in GDidees v.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Page Title. Attack Vectors: Scripting A vulnerability in the sanitization of the entry in the Page Title allows...
cve-2024-6387_AImade
Presentation of the Test Code for CVE-2024-6387 Introduction This document presents a Python script designed to test the vulnerability CVE-2024-6387, identified in OpenSSH. This vulnerability is a race condition in the SIGALRM signal handler that can allow remote code execution RCE on glibc-based...
CVE-2023-43355-CMSmadesimple-Reflected-XSS---Add-user
CMSmadesimple Reflected XSS v2.2.18 Author: Sergio Description: Multiple cross-site scripting XSS vulnerabilites in install/adduser.php of CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again in the My Preferences - Add...
cve-2020-11651
CVE-2020-11651 This is a POC for CVE-2020-11651, which obtains pre-auth RCE on a salt stack master, and/or all the associated minions. Some light details on the issue are here. POC for 2020-11652 not included. This obtains command execution on the master by creating a runner of salt.cmd with...
Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228
Log4JExploitation-VulnerabiliyCVE-2021-44228. introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j. CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact. the...
