1284961 matches found
CVE-2023-6634
CVE-2023-6634 Exploit Script Description This repository contains a Python script designed to exploit the CVE-2023-6634 vulnerability found in the LearnPress plugin for WordPress, versions up to and including 4.2.5.7. The vulnerability allows for remote code execution RCE due to improper input...
Solar-exploiting-log-4j
🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...
CVE-2024-37054
CVE-2024-37054 — MLflow pyfunc Deserialization RCE Severity: Critical Affected: MLflow 0.9.0 – 2.14.1 Type: Arbitrary code execution via Python pickle deserialization Description mlflow.pyfunc.loadmodel deserializes pythonmodel.pkl from the artifact store without any sanitization. An attacker who...
CVE-2021-41773
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...
CVE-2022-33980-Apache-Commons-Configuration-RCE
CVE-2022-33980-Apache-Commons-Configuration-RCE...
CVE-2026-6433
CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS, JS & PHP · Unauthenticated SQL injection → RCE via eval Affected: FlipperCode Custom CSS, JS & PHP ≤ 2.0.7 · WordPress plugin surface via admin-ajax.php At a glance Item| Detail ---|--- Vector| Unauthenticated SQLi tunneled through plugin...
dfir-malware-investigation
DFIR Malware Investigation Lab – Spring4Shell CVE-2022-22965 A comprehensive Digital Forensics & Incident Response DFIR project that simulates, detects, and investigates the Spring4Shell CVE-2022-22965 critical vulnerability. This project demonstrates the complete incident response lifecycle from...
My-Exploits
My-Exploits Vulnerability research I have done on four widely deployed platform services: Keycloak, Apache NiFi, HashiCorp Vault and HashiCorp Nomad. For each finding this repo carries the write-once artifacts I actually use, a Metasploit module where it made sense, a standalone Python proof of...
CVE-2025-68613-Python-Exploit
CVE-2025-68613: n8n Workflow Expression RCE Proof of Concept PoC exploit for a critical Remote Code Execution vulnerability in the n8n workflow automation platform. Description The vulnerability exists in the n8n expression evaluation system. User-supplied expressions are not properly sandboxed,...
CVE-2025-55182-Next.js-RCE
🔍 Next.js Security Testing Tool Professional security assessment utility for Next.js applications ⚠️ Disclaimer This tool is intended for authorized security testing and research purposes only. ✅ Use only on systems you own or have explicit permission to test ✅ For bug bounty programs with proper...
CVE-2019-7069-POC
Kibana ⚠️ Disclaimer: This script is for educational and authorized penetration testing only. Do not use it on systems you do not own or have explicit permission to test. The author and contributors are not responsible for any misuse or damage caused by this tool. 🎯 What is this? This is a Python ...
CVE-2025-8110
RCE - CVE-2025-59528 Gogs = 0.13.3 Exploit $ python3 CVE-2025-8110.py -h usage: CVE-2025-8110.py -h -u URL -lh HOST -lp PORT -user USERNAME -pass PASSWORD -x CVE-2025-8110 Gogs Exploit options: -h, --help show this help message and exit -u, --url URL Gogs base URL e.g., http://127.0.0.1:3000 -lh,...
CVE-2021-44228-PoC
CVE-2021-44228 PoC PoC for CVE-2021-44228. Project made for EDUCATIONAL PURPOSES ONLY. Exploit server This project creates two servers: http and ldap. Both are necessary for exploit to work. Specified java file is compiled and servers are started in Dockerfile. Payload is shown to user - it has t...
WEB-CLI_RCE_React2Shell
REACT2SHELL 🎯 Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...
CVE-2024-27954
⚠️ CVE-2024-27954 💀 Automatic Remote code Execution Exploit Tools | By GhostSec 💀 📝 Description Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from...
CVE-2025-10230
CVE-2025-10230 — Samba WINS Hook Command Injection The author assumes no liability for misuse or damage caused by this tool. Research is provided strictly for educational and defensive purposes. Description This repository contains a Proof-of-Concept PoC for CVE-2025-10230 , a command-injection...
ms08-067.py
📖 Overview This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Python3 Authorized testing...
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities KEV catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate...
By-Poloss..-..CVE-2026-48939
CVE-2026-48939 - iCagenda Unauthenticated File Upload to RCE Overview Field| Value ---|--- CVE ID| CVE-2026-48939 CVSS 4.0 Score| 10.0 Critical CVSS Vector| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-284: Improper Access Control Affected Versions| iCagenda 3.2.1 -...