1284959 matches found
CVE-2023-38831
CVE-2023-38831 CVE-2023-38831 is an RCE in WinRAR 6.23 Reference by https://github.com/z3r0sw0rd/CVE-2023-38831-PoC Read up by Google's TAG at: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ Download the latest vulnerable version: 6.22 for...
react2shell-lab
React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. โ ๏ธ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...
cve-2019-16278
CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...
react2shell-poc-CVE-2025-55182
React2Shell PoC CVE-2025-55182 A Proof-of-Concept PoC script for React2Shell CVE-2025-55182, a critical remote code execution RCE vulnerability affecting Next.js applications using Server Actions. !WARNING Disclaimer : This tool is for educational and authorized testing purposes only. I am not...
CVE-2023-50965
๐ฅ CVE-2023-50965 โ Stack Buffer Overflow Exploit Linux Proof of Concept exploit for CVE-2023-50965 , demonstrating a stack-based buffer overflow leading to Remote Code Execution RCE on vulnerable systems without exploit mitigations enabled. This project was developed for security research and...
CVE-2023-6972-Exploit-Arbitrary-File-Deletion
CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...
CVE-2026-45659
CVE-2026-45659 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. โก Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...
shai-hulud-scan
shai-hulud-scan A Claude Code skill that scans machines for indicators of compromise IOCs from the Mini Shai-Hulud supply chain worm CVE-2026-45321, CVSS 9.6. What is Mini Shai-Hulud? A self-propagating supply chain worm that compromised 170+ npm/PyPI packages on May 11, 2026 - including...
CVE-2023-47460
CVE-2023-47460 Description SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component Vulnerability Type SQL Injection Vendor of Product Knovos Discovery Affected Product...
CVE-2026-63030-POC
CVE-2026-63030: WordPress Pre-Auth RCE Explained ๐ Read the full technical analysis first: CVE-2026-63030: WordPress Pre-Auth RCE Explained This repository contains the proof-of-concept exploit referenced in that article. Start with the blog to understand the vulnerability, limitations, and...
CVE-2025-11170
CVE-2025-11170 WP็งป่กๅฐ็จใใฉใฐใคใณ for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload ๐ WP็งป่กๅฐ็จใใฉใฐใคใณ for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload ๐ Description The WP็งป่กๅฐ็จใใฉใฐใคใณ for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...
PoC_CVE-2016-2098_Rails42
A PoC of CVE-2016-2098 rails 4.2.5.1 view has a vulnerable code app/views/poc/render1.html.erb following command will cause remote code execution $ curl ':3000/poc/render1?template\inline='...
CVE-2026-7275-moodle
CVE-2026-7275-moodle PoC & documentation for CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs โ Path Traversal / Arbitrary File Write that can lead to RCE on unpatched Moodle versions. Disclaimer: For authorized security research, auditing, and defensive education only. Do not...
log4j2_vul_local_scanner
Log4j2 Vulnerability Local Scanner CVE-2021-45046 Log4j vulnerability local detection script, scans all java processes on the host, detects whether a vulnerable log4j-core jar package has been introduced, and whether it may be subject to remote code execution attacks CVE-2021-45046. Uploads the...
ICT287-CVE-2022-42889
ICT287-CVE-2022-42889 To find full exploit setup and recreation report please find the CVE-2022-42889-Project Vulnerability Exploitation Report file. VM that was used to build and run the exploit isn't included in this repository. Setup and exploit recreation for CVE-2022-42889 Text4Shell...
CVE-2025-2945_PgAdmin_PoC
CVE-2025-2945PoC pgAdmin Proof of Concept pgAdmin Query Tool RCE CVE-2025-2945 โ Python Proof of Concept โ ๏ธ Disclaimer This repository contains a proof-of-concept exploit for CVE-2025-2945, a critical remote code execution vulnerability in pgAdmin 4 versions prior to 9.2. Use this code only in...
CVE-2024-37084-Poc
CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc about CVE-2024-37084 How to use : py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h, --help show...
CVE-2019-1759-csrf-js-rce
CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce Watch the video...
React2Hell
๐งจ React2Hell โ CVE-2025-55182 Exploit ๐ฅ Next.js / React Server Remote Code Execution RCE Exploit โโโโโโ โโโโโ โโโ โโโโ โโโโโโ โโโโโ โโ โโ โโโโโ โโ โโ โโโโโโโ โโโโ โโโโโ โโโโโ โโ โโโโ โโโโโโ โโโโ โโ โโ โโ โโ โโโโโ โโโโโ โโโโโ โโ โโโโโ โโ โโ โโโโโ โโโโโ โโโโโ Next.js/React Server RCE Exploit โ...
CVE-2020-11022-CVE-2020-11023
CVE-2020-11022 CVE-2020-11023 In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuer...