CVE-2026-87902-PoC-pwnVader

CVE-2026-87902 — Unauthenticated local file inclusion in WordPress core page-template resolution → RCE Author: pwnVader · License: MIT repository root | ---|--- Component| WordPress core wp-includes/template.php Type| CWE-98 — PHP file inclusion LFI → RCE Affected| WordPress 7.1.2 7.0 branch fixe...

cve-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read CVSS 10.0 · Unauthenticated · Actively exploited CISA KEV A parser differential between GitLab Workhorse Go reverse proxy and Puma/Grape Ruby lets an unauthenticated attacker bypass Workhorse's accelerated-upload handoff and reach three...

CVE-2021-41773_CVE-2021-42013_Exploits

Exploiting CVE-2021-41773 and CVE-2021-42013 Overview This repository focuses on exploiting two vulnerabilities in Apache HTTPD: CVE-2021-41773 and CVE-2021-42013. These CVEs represent path traversal vulnerabilities that can potentially lead to file mapping and remote code execution on Apache HTT...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

CVE-2024-25641-Exploit-for-Cacti-1.2.26

CVE-2024-25641 Exploit for Cacti 1.2.26 Exploiting CVE-2024-25641 on Cacti 1.2.26. When a user is authenticated, an arbitrary file write vulnerability allows Remote Code Execution RCE. Overview This script automates the process of exploiting CVE-2024-25641 in Cacti 1.2.26. The vulnerability allow...

CVE-2024-12877

CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform = 3.19.2 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via...

CVE-2020-17518

CVE-2020-17518 Apache Flink RESTful API Arbitrary File Upload via Directory Traversal Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A REST handler which was introduced in Apache...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

cve_2022_0847_shellcode

cve20220847shellcode Description This repository contains a Python script genshellcode.py, based on pwntools, to generate a shellcode implementing CVE-2022-0847. The shellcode is based on this Poc: antx. I analyzed the code of the PoC and its execution with strace to catch all the system calls...

CVE-2016-5195

CVE-2016-5195 my personal POC and EXPLOIT of CVE-2016-5195 dirty COW Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: $ gcc poc.c -o poc -static -lpthread You shall run it as follow: ./poc destinationfile fakefile You shall make sure the...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint -un -p -ru Disclaimer This script is for educational and rese...

CVE-2025-24813

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-24813, vulnerability in Apache Tomcat. The script has been modified based on the related link and tailored to my needs. Setup Vulnerable Tomcat Environment Given environment based on the official Tomcat 9.0.90 image. It removes the server's...

CVE-2023-46474

PMB =7.5.3 - Remote Code Execution via Unrestricted File Upload CVE-2023-46474 CVSS v3.1 Vector| CVSS v3.1 Score ---|--- AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H| 9.1 Discovered during a penetration test by Marcus Reynaud of Devensys Cybersecurity Description The script pmb/admin/convert/startimport.p...

KDStab

KDStab 6/28/2022 : Microsoft has rolled out a patch that prevents opening a handle to the MsMpEng.exe token, and as such the KillDefender portion of this tool no longer works. Backstab should still work. Not sure the patch ID, may work on older unpatched systems. Verified on Win10 21H2 and Win11...

CVE-2026-14894

CVE-2026-14894 Arbitrary File Upload Nxploited Mass Exploiter — Super Forms & Elementor Pro 🩸 Join our Telegram for the latest exclusive 0-days & weaponized CVEs 📡 Channel: https://t.me/KNxploited 👤 Nxploited | @Kxploit A high-speed, multi-threaded mass exploiter that chains two unauthenticated...

CVE-2022-30929

CVE-2022-30929 CVE-2022-30929 POC Suggested description Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper. Vulnerability Type Insecure Permissions Vendor of Product github;gitee Affected Product Code Base...

CVE-2021-22205-gitlab

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critical Unrestricted File Upload vulnerability in Elementor Pro Potentially leading to Remote Code Execution RCE ⚠️ Overview CVE-2026-32475 is a critical security vulnerability affecting Elementor Pro , a widely deployed WordPress...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulnerability through the CLI can lead to RCE Products and Versions affected: Product| Affected Versions ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS: CRITICAL Actively Exploited: YES Patch: YES Mitigation: YES Help usage: CVE-2024-23897.py...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...