CVE-2019-2729

CVE-2019-2729 Exploit code for CVE-2019-2729 Oracle Weblogic running on Windows. Can create a callback to a CobaltStrike listener or a Metasploit handler with payload windows/meterpreter/reversetcp Also have a non-beacon exploit that just executes commands on the underlying host. exploit.py. This...

ShockZaum-CVE-2014-6271

CVE-2014-6271 Script to attack shellshock vulnerability root@kitploit: ! Usage: ./ShockZaum -u 'https://nasa.gov' -c 'rm -rf /' -p '/cgi-bin/aliens.cgi'...

CVE-2019-19781-CitrixRCE

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781 References: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ Bypassing: 1 - Deleted / Modified scripts at: /vpn/../vpns/portal/scripts/ 2 - Forward Slash "/" issues after perl commnad...

CVE-2023-46805

Title: Proof of Concept for CVE-2023-46805 - For Educational Use Only License: This work is placed under the Creative Commons Attribution 4.0 International License CC BY 4.0. You are free to share, copy, distribute, and transmit this work, to adapt it or use it for other purposes, provided the...

Gitlab-CVE-2021-22205

Gitlab-CVE-2021-22205 Multi-threaded batch detection script for CVE-2021-22205 Use dnslog with poc for detection Use multi-threading for detection Custom command execution...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...

CVE-2026-87618

A flaw was found in Google Chrome. This vulnerability involves incorrect reference resolution within the browser's Storage component. A remote attacker, who has already compromised the browser's renderer process, could exploit this by enticing a user to visit a specially crafted HTML page...

CVE-2025-68613

CVE-2025-68613 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by...

CVE-2026-87634

A flaw was found in Chromium. A use-after-free vulnerability exists in the WebPackaging component. A remote attacker could exploit this by enticing a user to open a specially crafted HTML page. This could potentially lead to arbitrary code execution outside of the sandbox...

CVE-2026-87572

A flaw was found in the DevTools component of Chromium. A remote attacker, after compromising the renderer process, could exploit an injection vulnerability by crafting a malicious HTML page. This could potentially lead to the execution of arbitrary code outside the sandbox, allowing the attacker...

CVE-2021-34481

CVE-2021-34481 Check patch for CVE-2021-34481 Windows Print Spooler Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481...

CVE-2026-87537

A flaw was found in Google Chrome's Extensions. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows the attacker to execute arbitrary code outside of the browser's security sandbox by sending specially...

CVE-2026-87524

A flaw was found in the Core component of Google Chrome. This use-after-free vulnerability allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page,...

CVE-2026-87514

A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. This can be achieved by exploiting the flaw through a local program, leading to a complete compromise of the affected system...

CVE-2026-87491

A flaw was found in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox environment...

Drupal-SA-CORE-2019-003

Drupal-SA-CORE-2019-003 CVE-2019-6340 Drupal SA-CORE-2019-003 CVE-2019-6340 CVE-2019-6340.md https://mp.weixin.qq.com/s/EQD4-K6HgBY9wdzeXeyzkg https://paper.seebug.org/821/ https://www.youtube.com/watch?v=QtLDDN0Duko linkname https://pbs.twimg.com/media/D0C-KiXX4AM2vR3.jpg:large CVE-2019-6340 isn...

CVE-2022-47966-Scan

CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE simple poc...

go-get-rce

This repository does not have a README...

CVE-2026-87648

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading t...