1325882 matches found
selenium-node-takeover-kit
Metasploit Exploits This project has moved. To get the latest version, pull from https://codeberg.org/JonStratton/selenium-node-takeover-kit This combines some of the examples below to upload files to, download files from, and execute code on a Selenium node via the “COMMANDTYPE” param. RCE...
SDT_CW3B1_rce
SDTCW3B1rce CVE-2021-46422 Installation git clone https://github.com/xanszZZ/SDTCW3B1rce cd SDTCW3B1rce Usage Because this tool is a POC written according to the development specification of the pocsuite3 framework. Please download pocsuite3 before using it. Project address...
CVE-2024-7094
CVE-2024-7094 CVE-2024-7094 Vulnerability checker Vulnerability type: PHP Code Injection...
CVE-2017-1000475
CVE-2017-1000475: Freesshd Unquoted Service Path Prove of concept Windows 10 with freeSSHd 1.3.1, installed by default and with the option running as a system service. Command to check Unquoted Service Path. The service is unquoted by default. The process is running as SYSTEM by default. Create a...
CVE-2025-59287-PoC
CVE-2025-59287 / CVE-2023-35317 PoC Inside CVE-2025-59287: SoapFormatter RCE in WSUS: https://shellcode.blog/wsus-cve-2025-59287-investigation/ This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intende...
POC_CVE-2026-41940
POCCVE-2026-41940 Quick start python3 pocCVE-2026-41940.py -h Usage examples Scan one host python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain python3 pocCVE-2026-41940.py -u https://target.example:2086 --action list Run a shell command python3...
USN-8958-1 dotnet8, dotnet10, dotnet11 vulnerabilities
It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be incomplete. This issue only affected...
CVE-2023-38646
CVE-2023-38646 Original script from securezeron During testing, I found that the reverse shell generated by this POC failed due to the trailing '=' character after base64 encoding. I made a slight modification to fix this issue. Original reverse shell payload generation code base64.b64encode"bash...
jinjava-cve-2026-25526-poc
Step-by-step exploit all 9 steps: mvn exec:java -Dexec.mainClass=ExploitHarness -q 2. Final exploit chains file creation, file read, info disclosure: mvn exec:java -Dexec.mainClass=ExploitFinal -q 3. File content exfiltration reads /etc/passwd, /etc/hosts: mvn exec:java...
ICS-MoxieManager-FileUpload-PoC
ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager proof https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impact Affected CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager A vulnerability in the...
CVEs
CVE-2022-2992: Remote Command Execution via Github import Information Description: This allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint. Versions Affected: all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 Version Fixed:...
CVE-2022-26134-cve1
CVE-2022-26134RCE Installation git clone https://github.com/yigexioabai/CVE-2022-26134-cve1.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2022-26134RCE.py放到pocsuite3\pocs目录下 cd pocs Using pocsuite3 Single URL: pocsuite -r CVE-2022-26134RCE.py -u url Multiple URLs: pocsuite -r...
Poc-CVE-2024-21542
Poc-CVE-2024-21542 Overview luigi is a package that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization, handling failures, command line integration, and much more. Affected versions of this package are vulnerable to Arbitrary File...
PoC-CVE-2026-20841
PoC CVE-2026-20841 Description This project is a simple Proof of Concept PoC regarding Windows Notepad vulnerability about "remote code execution". Attackers have the ability to build a special .md file and by tricking users with Social Engineering skills into clicking the link within the .md fil...
CVE-2018-17553
CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS version 2.8 and prior This proof of concept was put together when working on the Black Pearl box from TCM. I couldn't find anyone that put out a PoC other than just using Metasploit. As I'm avoiding Metasploit in my hacking journey to then go back an...
CVE-2026-0776
CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...
CVE-2021-22053
CVE-2021-22053 CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the...
MAL-2026-18392 Malicious code in @chatunitycenter/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52978b0c3293c9df936b51c70527efeb5b0f496a59f0df857016fc781f876043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-118762 Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN
Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pullrequesttarget with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and invokes the...
CVE-2026-118762
The Monkeytype typing test (prior to version 26.43.0 ) contains a vulnerability in the .github/workflows/fix-formatting.yml workflow. The workflow runs on pull_request_target with repository write permissions, allowing an external contributor to trigger the execution of an untrusted oxfmt binary ...