491608 matches found
CVE-2021-24499
CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Arbitrary File Upload WordPress Theme Workreap 2.2.2 - Unauthenticated File Upload Leading to Remote Code Execution A powerful and accurate mass exploitation tool for CVE-2021-24499 vulnerability in WordPress...
CVE-2022-44268
CVE-2022-44268 🧙♂️ CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit Video 📼 https://youtu.be/quKxwNAMBIA Usage 🛠 Poison the image ☣️ python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png Upload poisoned PNG image. Check if...
CVE-2018-6546-Exploit
CVE-2018-6546 POC Exploit This is a proof of concept exploit for version 1.27.5.0 and prior of the Plays.tv serviceplaysservice.exe. More details about the vulnerabilities can be found at: https://www.securifera.com/advisories/cve-2018-6546/...
CVE-2026-4885
CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...
CVE-2025-20384
SPLUNK CVE-2025-20384 i dunno, i just read stuff my friendo sent to me and start typing down some random sorry ass nub javascript code Log Injection/Forgery/Poisoning/Obfuscate type POC Please read this arcticle OWASP Log Injection TL;DR Look for static file, passed it and append some random...
CVE-2022-0219
CVE-2022-0219 Jadx is vulnerable to Improper Restriction of XML External Entities CWE-611 when exporting a malicious APK file via the -e option containing a crafted AndroidManifest.xml / strings.xml to gradle. It can lead to local file disclosure when using it from the CLI. When used as a library...
CVE-2025-8110
CVE-2025-8110 - Gogs symlink bypass: arbitrary file write as the Gogs process user PoC Proof-of-concept for CVE-2025-8110, a symlink-following flaw in Gogs //contents/. Gogs follows the symlink and writes attacker-controlled bytes to the link target with the privileges of the Gogs process. When...
CVE-2016-5195
CVE-2016-5195 DirtyCOW PoC Modified from dirtycow.github.ioc include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i 100000000; i++ c += madvisemap, 100, MADVDONTNEED;...
CVE-2018-6574
Code n stuff...
CVE-2024-36991
CVE-2024-36991 POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file. Overview This is a bulk scanning and exploitation tool for CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. This vulnerability was...
CVE-2025-63830
📂 CKFinder 1.4.3 – Stored Cross-Site Scripting XSS via Malicious SVG Upload CVE ID: CVE-2025-63830 🧭 Overview A stored Cross-Site Scripting XSS vulnerability was identified in CKFinder v1.4.3. The issue resides in the file upload functionality, which fails to properly sanitize SVG files containin...
POC-CopyEscape-CVE-2026-17106
CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...
CVE-2026-75865
CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 Proof-of-concept and technical write-up for CVE-2026-75865 , an unauthenticated arbitrary file upload leading to remote code execution in the WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent...
CVE-2022-0847
Information Exploit Title: Local Privilege Escalation in Linux kernel CVE-2022-0847 Tested on: ubuntu 20.04.1 LTS Affect product:Linux kernel 5.8 or later Fixed Product:Linux kernel 5.16.11, 5.15.25, 5.10.102 CVE ID: CVE-2022-0847 How to Exploit Local Privilege Escalation gcc exploit.c -o exploit...
CVE-2026-87902
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-87902 CVE-2026-87902 WordPress Core 7.1.1 - WordPress I am @abraxasnull. Loopback lab. The client is CVE-2026-87902-Abraxas-Labs.py. Unauthenticated LFI via locatetemplate. getpagetemplate builds...
CVE-2021-39433
CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...
CVE-2021-27513-CVE-2021-27514
exploit-eyesofnetwork Version 5.3.5 up to 5.3.10 CVE-2021-27513 / CVE-2021-27514 The brute-forcing can take a very long time on non production environement cause "sessionid" is created at every login but every sessionid generated by the app are valide for the PoC i deployed an EyesOfNetwork...
CVE-2024-50379
Manual exploitation is troublesome, so I whipped up an exp.. Usage: shell.jsp is the shell file, ggsl.jsp is the name/path saved to the target server. ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp Disclaimer This tool is only intended for legally authorized enterprise...
CVE-2021-3129-Lab
CVE-2021-3129: Laravel Debug Mode RCE Lab Hands-on lab for exploiting CVE-2021-3129 - a critical Laravel vulnerability allowing unauthenticated file read and potential RCE. Quick Start Clone git clone https://github.com/theNareshofficial/CVE-2021-3129-Lab.git cd CVE-2021-3129-Lab Build & Run dock...