57574 matches found
CVE-2023-43208-PoC
CVE-2023-43208 - Mirth Connect Unauthenticated RCE Requirements Python 3.11 or higher tested on 3.11, 3.12, 3.13 Setup Create a clean virtual environment python3 -m venv .venv source .venv/bin/activate Install pinned dependencies pip install -r requirements.txt Usage Check version only python3...
dejavu
DejaVu This container runs a web application that analyzes images and returns their metadata using exiftool. Users send the application a URL to an image and the app will retrieve it, analyze it, and return the results. The version of exiftool used by the application is vulnerable to CVE-2021-222...
CVE-2023-4634-PoC
CVE-2023-4634 - RCE Vulnerability in WordPress Plugin Media Library Assistant 1. Build and launch environment cd Stand docker-compose up --build -d 2. Wait for services to start 60 seconds sleep 60 curl -I http://localhost:8080 3. Run vulnerability scan cd ../PoC/src python3 scanner.py...
CVE-2026-5059-poc
Where is CVE-2026-5059 in the code? The vulnerability is in two files working together: File 1: tools.py โ The Root Cause The old version used shell=True in executepipedcommand: python OLD VULNERABLE CODE process = subprocess.run command, โ raw string passed to shell shell=True, โ THIS is the...
CVE-2024-40445_CVE-2024-40446
MimeTeX Vulnerability Reference CVE-2024-40445 & CVE-2024-40446 This repository serves as the public reference for the security issues CVE-2024-40445 and CVE-2024-40446 affecting MimeTeX, a lightweight open-source LaTeX renderer written in C. โ ๏ธ MimeTeX appears to be no longer actively maintained...
b374k
b374k shell 3.2 Este PHP Shell es una herramienta รบtil para administradores de sistemas o web para realizar gestiรณn remota sin usar cpanel, conectarse mediante ssh, ftp, etc. Todas las acciones se realizan dentro de un navegador web. Caracterรญsticas: Gestor de archivos ver, editar, renombrar,...
WP-CVE-2016-10033
WordPress The 8000 before the colon represents the host machine's port; it can be set arbitrarily. Visit http://127.0.0.1:8000 and see the WordPress main interface to indicate a successful start POC Assuming the target address is: http://127.0.0.1:8000/ 1. Copy the following HTTP request into...
Malicious code in eth-gas-oracle (RubyGems)
Source: amazon-inspector 0f6cd8a676acbc17559b87ede98a030f26837472a482763f1e8a4818da65659d The gem's native extension build script ext/extconf.rb base64-decodes an embedded Ruby payload and executes it via eval inside a double-forked, detached child during gem install. The decoded payload opens a...
wshlient
Wshlient Cliente de Web Shell Descripciรณn y Demo Wshlient es un cliente de web shell diseรฑado para ser bastante simple pero versรกtil. Solo necesitas crear un archivo de texto que contenga una solicitud HTTP e indicar dรณnde Wshlient inyecta los comandos, luego puedes disfrutar de una shell...
CVE-2025-9074
Description Vibe coded a small exploit script in pure Bash without dependencies on tools that might not be installed. The script talks to the internal Docker API, creates and starts a new container, mounts the host C drive and then executes a command inside that. The output is streamed back to th...
cve-2023-5044
CVE-2023-5044 Ingress Nginx Exploit Proof-Of-Concept This is a quick Go program to exploit the recent CVE in the Ingress Nginx controller. Details on how to do this are already out there via Rory McCune's blog at https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/, this just...
RPC-Backdoor
RPC Backdoor Emulation This project is a basic implementation of an "RPC Backdoor" meant to emulate TTPs used by certain groups. The project contains an RPC server with five functions: Execute a command with cmd.exe /c and the CreateProcess API call. Steal a token and execute a command with cmd.e...
Exploit-CVE-2025-24801
CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...
CVE-2017-1000117
CVE-2017-1000117 Malicious actors can craft "ssh://โฆ" links to trick victims into accessing the malicious link when executing programs, thereby achieving command execution. This link can be placed in the .gitmodules file of a git project, so that when a victim performs git clone...
CVE-2014-6271
CVE-2014-6271 Usage go run CVE-2014-6271.go www.example.com 80 whoami...
CVE-2023-41892_poc
CVE-2023-41892poc Customized this for my own use pocnoauth.py Basic PHP one-liner webshell OS command execution via ?cmd= pocauth.py Simple key-based authentication added webshell SHA-256 hash comparison method Commands can only be executed if the correct key is provided Code modification require...
CVE-2022-39952-better
FortiNAC CVE-2022-39952 PoC for CVE-2022-39952 affecting Fortinet FortiNAC. This exploit allows an attacker to execute arbitrary commands on the FortiNAC server. It is based on the PoC developed by horizon3ai, with additional options for targeting multiple hosts. Disclaimer: This exploit is for...
CVE-2019-14811-in-pdf-exploit
CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...
CVE-2023-46818
CVE-2023-46818 PoC This is a python implemntation of the PoC provided by Egidio Romano aka EgiX Over here, this exploit will prompt you a webshell, for a fully interactive shell execute a command and send yourself a reveseshell. Usage python exploit.py http://localhost username password Disclaime...
CVE-2025-51820
CVE-2025-51820 A critical Remote Code Execution RCE vulnerability CVE-2025-51820 has been discovered in the Shopping Portal v1.0. ๐จ Remote Code Execution in Online Shopping Portal Project v1.0 CVE-2025-51820 ๐ Introduction In todayโs digital world, Remote Code Execution RCE remains one of the mos...