fastjson-RCE

fastjson-v1.2.47-RCE Vulnerability Reproduction fastjson-1.2.47 == Resource Download: 下载 http://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.47/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/archive/1.2.47.zip jar...

CVE-2021-42392-exploit-lab

⚠️ H2 Database RCE Exploit PoC CVE-2021-42392 This repository provides a minimal and controlled environment to test the H2 Database Remote Code Execution vulnerability CVE-2021-42392 using the CREATE ALIAS feature. Unlike many demonstrations, this exploit targets the H2 TCP service directly...

Cooolis-ms

Cooolis-ms Wiki Documentation Cooolis-ms is a code execution tool that includes a Metasploit Payload Loader, Cobalt Strike External C2 Loader, and Reflective DLL injection. It is designed to evade static detection of code we intend to execute that contains known signatures, helping red team...

SEW

SEW: Style-Encoded Watermarking of LLM-Generated Code Paper Link 📖 📰 News 📢 NEW! The SEW paper is available on arXiv: arXiv:2609.39414. Sep 30, 2026 📢 The official SEW code has been released on GitHub. Sep 30, 2026 🔍 Motivation Feature| Token-level watermarks KGW, SWEET, Unigram, STONE, STA-1|...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 – XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...

freemarker_RCE_struts2_s2-061

freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE testscript python freemarkerRCEstruts2s2-061.py...

CVE-2024-25600-Bricks-Builder-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2019-17571

CVE-2019-17571 / Apache Log4j 1.2.X Deserialization Remote Code Execution Vulnerability Vulnerability warning reference link: https://mp.weixin.qq.com/s/okU2y0izfnKXXtXG3EfLkQ 1. Vulnerability Description Apache Log4j is a Java-based open-source logging tool developed by the Apache Software...

CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ https://github.com/user-attachments/assets/403a70f4-4ff4-4ab7-b11c-d73d70adaf0b Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment - Arbitrary File upload Description The Instant Appointment plugin for WordPress is vulnerable to Arbitrary File upload in versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upload a shell and...

Log4jUnifi

Log4jUnifi Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more. Another Log4j on the fire: Unifi Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository automates the exploitation process. See the blog po...

CyberPanel-RCE

CyberPanel-RCE Exploit for CyberPanel RCE found on v2.3.6 More information availabe on my blog: https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...

CVE-2025-55182-React2Shell-RCE

CVE-2025-55182 - React2Shell Unauthenticated RCE in React Server Components CVE-2025-55182, also known as React2Shell , is a critical unauthenticated Remote Code Execution RCE vulnerability affecting React Server Components packages versions 19.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability ma...

CVE-2022-37206

CVE-2022-37206 CVE-2022-37206 POC Additional Information https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md Vulnerability Type SQL Injection Vendor of Product the development group Affected Product Code Base https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0...

CVE-2025-3052

🐞 CVE-2025-3052: IhisiParamBuffer Memory Corruption This repository centralizes research material related to CVE-2025-3052, a memory corruption vulnerability in a UEFI module signed with Microsoft's third-party certificate that allows an attacker to corrupt security-critical firmware structures,...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Lab Setup ⚠️ Disclaimer This lab is for educational and research purposes only. Do NOT use any of the information or techniques demonstrated here on systems you do not own or have explicit permission to test. Unauthorized use of these methods may violate laws and result in severe...

CVE-2022-22965

CVE-2022-22965 Spring Framework/CVE-2022-22965 Vulnerability ID: CVE-2022-22965/CNVD-2022-23942/QVD-2022-1691 Reproduce the vulnerability docker pull vulfocus/spring-core-rce-2022-03-29 docker run -dit -p 8080:8080 vulfocus/spring-core-rce-2022-03-29 Vulnerability detection POC It is recommended ...

CVE-2019-2725

CVE-2019-2725 CVE-2019-2725 CNVD-C-2019-48814, WebLogic wls9-async Command Echo 10.3.6 12.1.3 ResultBaseExec.java Used for testing defineClass. It will recover the malicious class from base64 and execute the code, mainly for convenience optional. JDK7u21.java Generates the XML in...

CVE-2026-6951

CVE-2026-6951 simple-git Remote Code Execution ★ CVE-2026-6951 simple-git --config Option Filter Bypass RCE PoC ★ https://github.com/user-attachments/assets/4c992530-c5bb-4ff4-be5d-af0857eebb67 Overview CVE-2026-6951 is a remote code execution vulnerability in simple-git caused by an incomplete f...