CVE-2020-0796-SMBGhost-Exploit-Demo

CVE-2020-0796 Exploit Demo SMBGhost This project demonstrates a proof-of-concept PoC exploit of CVE-2020-0796, also known as SMBGhost - a critical pre-auth RCE vulnerability affecting Windows 10 and Windows Server systems using SMBv3. This was developed as part of a school cybersecurity project...

RCE-PoC-CVE-2021-25646

CVE-2021-25646 Proof-of-Concept Go Version Overview This repository contains a proof-of-concept PoC exploit for CVE-2021-25646, a critical remote code execution vulnerability in Apache Druid. The exploit is written in Go and allows for interactive command injection via the terminal. Features...

CVE-2023-36884-MS-Office-HTML-RCE

CVE-2023-36884: MS Office HTML RCE with crafted documents On July 11, 2023, Microsoft released a patch aimed at addressing multiple actively exploited Remote Code Execution RCE vulnerabilities. This action also shed light on a phishing campaign orchestrated by a threat actor known as Storm-0978,...

CVE-2024-29272

CVE-2024-29272 This is a Proof-of-Concept for CVE-2024-29272, an unauthenticated arbritrary file upload vulnerability that leads to remote code execution on versions of VvvebJS -l -p in another terminal: nc -lvnp...

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Proof-of-concept Python script targeting CVE-2023-43208 in Mirth Connect. Disclaimer Use only in environments you own or are explicitly authorized to test. This repository is for security research, validation, and defensive testing. The author assumes no...

CVE-2020-0688

CVE-2020-0688 A remote code execution vulnerability exists in Microsoft Exchange Server when the server fails to properly create unique keys at install time. Knowledge of a the validation key allows an authenticated user with a mailbox to pass arbitrary objects to be deserialized by the web...

EXPLOIT-CVE-2026-56121

CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView gRPC Deserialization Unauthenticated remote code execution in Feast ⚠️ For authorized security testing and education only. Only run this against the bundled Docker lab or systems you own / are explicitly permitted to test. Unauthorized us...

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites Plugin = 1.0.7 - CSRF to Arbitrary Plugin Installation 📌 Overview CVE-2025-25101 is a Cross-Site Request Forgery CSRF vulnerability in the MetricThemes Munk Sites plugin for WordPress versions ≤ 1.0.7. This vulnerability allows an unauthenticated attacker t...

Commvault-CVE-2025-34028

CVE-2025-34028 Commvault Remote Code Execution CVE-2025-34028 NSE How to run in Nmap: nmap -p443 --script CVE-2025-34028 --script-args='https-ports=443'...

cve-2011-2553

Notice: This repository contains educational material for testing in a controlled laboratory. Do not use the files or techniques described here against systems that are not your own or that do not have explicit authorization. The goal is learning and strengthening security. CVE-2011-2553 FTP...

CVE-2022-22947

CVE-2022-22947 SpringCloudGatewayRCE Code By:Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read online Cybersecurity Law of the...

CVE-2020-26217-XStream

CVE-2020-26217 XStream RCE Exploit XStream Remote Code Execution Vulnerability Exploit Tool. Vulnerability Description CVE-2020-26217 is a deserialization vulnerability in the XStream library that allows an attacker to trigger remote code execution by crafting malicious XML data. Affected version...

CVE-2025-55182-Exploit

CVE-2025-55182 – React Server Components RCE Exploit ⚠️ Disclaimer: For authorized security testing and research purposes only. Do not use against systems without explicit permission. Overview This is an improved version of the exploit script for CVE-2025-55182 React Server Components Remote Code...

CVE-2022-22965-PoC

CVE-2022-22965 PoC Minimal example of how to reproduce CVE-2022-22965 Spring RCE. Run using docker compose 1. Build the application using Docker compose docker-compose up --build 2. To test the app browse to http://localhost:8080/handling-form-submission-complete/greeting 3. Run the exploit...

CVE-2025-69212

CVE-2025-69212 Description OpenSTAManager is a management software solution for technical assistance, electronic invoicing, and accounting. The versions =2.9.8 are vulnerable to an authenticated remote code execution vulnerability. An attacker can exploit this issue by uploading a specially craft...

CVE-2024-49113

LDAP Nightmare An exploit for CVE-2024-49113 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Buffer Overflow RCE Overview Stack-based buffer overflow in CWMP TR-069 leading to remote code execution. Field| Value ---|--- Product| TP-Link AX10, AX1500 Affected| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC...

CVE-2026-33017

CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview CVE-2025-62593 is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. The root cause is the absence of authentication on critical HTTP endpoints /api/jobs, /api/jobagent/jobs. An attacker can...

CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day

CVE-2025-54253: Inside the Adobe AEM-Forms Zero-Day — What Pentesters & Defenders Must Do TL;DR: Adobe Experience Manager AEM Forms on JEE ≤ 6.5.23.0 contained a critical, network-accessible flaw CVE-2025-54253 that allows unauthenticated remote code execution via misused Struts/OGNL endpoints. A...

Centreon-20.04

CVE-2020-12688 - Authenticated RCE Centreon 20.04 minHelpCommand.php command name variable RCE CVE-2020-12688 Centreon Latest Release Documentation: https://docs.centreon.com/current/en/releases/centreon-core.html Discovered by: TheCyberGeek Date Discovered: 30/04/2020 Date Disclosed: 15/06/2020...