CVE-2022-0847-container-escape

CVE-2022-0847 A simple exploit that uses dirtypipe to inject shellcode into runC entrypoint to implement container escapes. Usage Produce base64 encoded shellcode using msf: $ msfvenom -p linux/x64/exec CMD="" -f base64 Compile and run in the container, the overwritten filename is the bin that ru...

cve-2026-9082-drupal-postgresql-rce

CVE-2026-9082 Drupal PostgreSQL SQLi to RCE This repository contains a local lab and a short exploit for the Drupal JSON:API PostgreSQL SQL injection described in the Ambionics article. The important part of the exploit is the PostgreSQL escalation: once the injection can evaluate a SELECT...

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit This repository contains a Go-based proof-of-concept tool for testing a known Control Web Panel CWP vulnerability scenario related to CVE-2026-57517. The implementation targets a blind SQL injection path and includes optional webshell deployment and command execution fl...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9.3 through 2.7. The vulnerability...

CVE-2021-44228_Example

CVE-2021-44228Example Run each of the 3 sections in a spearate tab/console marshalsec LDAP server https://github.com/chilliwebs/marshalsec Forked from https://github.com/mbechler/marshalsec docker build -t marshalsec marshalsec/. docker run -it --rm -p 1389:1389...

CVE-2025-11953-PoC

Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...

CVE-2019-19919

CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...

CVE-2015-3306-Home-Lab

ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...

CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40347: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection Unauthenticated Exploit Title: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection Unauthenticated Date: 2022-06-09 Exploit Author: Hamdi Sevben Vendor Homepage:...

CVE-2021-27404

Authenticated Host Header Injection - Askey Internet Fiber Modem Vendor: Askey Software Version: BRSVg11.11RTFTEF001V6.54V014 Model: RTF8115VW Vulnerable Header: Host Not tested in other model/version. Impact: An attacker could take advantege on that vulnerability to redirect user to a fake Login...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

CHIRP-CodeExecution_via_Malicious_ImageFile

CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...

CVE-2023-46818

CVE-2023-46818 - ISPConfig PHP Code Execution | Exploit High Remote Code Execution in ISPConfig PoC implementation. Resume ISPConfig versions /admin/languageedit.php — ISPConfig vulnerable endpoint 🚀 Launching the Exploit Run the exploit script CVE-2024-47533.py. python3 CVE-2023-46818.py -u -U -...

CVE-2026-33937

CVE-2026-33937 — Handlebars.js AST Injection RCE Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. Overview CVE-2026-33937 is a type confusion vulnerability in Handlebars.js. The Handlebars.compile function accepts both a template string and a pre-parsed AST objec...

CVE-2019-9978

CVE-2019-9978 - Social Warfare WordPress Plugin RCE system'cat /etc/passwd' ✅ Step 2 – Start a Python HTTP Server Use Python to serve your payload: python3 -m http.server 8000 This will make your payload.txt accessible at: http://:8000/payload.txt ✅ Step 3 – Run the Exploit python3 CVE-2019-9978....

log4jcheck

Northwave Log4j CVE-2021-44228 checker Friday 10 December 2021 a new Proof-of-Concept 1 addressing a Remote code Execution RCE vulnerability in the Java library 'log4j' 2 was published. This vulnerability has not been disclosed to the developers of the software upfront. The vulnerability is being...

CVE-2021-40374

CVE-2021-40374 - Stored Cross-site Scripting in OpenEyes 3.5.1 Description A stored cross-site scripting XSS vulnerability was identified in OpenEyes 3.5.1, developed by the Apperta Foundation. Improper input handling in the 'Address1' parameter allowed for JavaScript to be injected into a patien...

confusploit

This is a Script to find vulnerable servers to CVE-2022-26134 and can be used together SHODAN CLI and Bash Scripting One-Liner Please use only for legal and educational purposes Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a...

CVE-2016-10033

CVE-2016-10033 – PHPMailer Remote Code Execution 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2016-10033 , a vulnerability in PHPMailer versions prior to 5.2.18. The issue occurs when the $additionalparameters argument of PHP's built-in mail function is improperly...

CVE-2014-3704

Code Conversion to Python 3 This code is taken from "Drupal 7.0 7.31 - 'Drupalgeddon' SQL Injection Add Admin User" and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Drupal". The original code was written in Python 2,...