Solar-exploiting-log-4j

🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...

CVE-2021-22006

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Analyze Usage ------------------------------------------------------------- CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Github: https://github.com/r0ckysec Twitter: https://twitter.com/r0cky6861636b Author: r0cky...

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Proof-of-concept Python script targeting CVE-2023-43208 in Mirth Connect. Disclaimer Use only in environments you own or are explicitly authorized to test. This repository is for security research, validation, and defensive testing. The author assumes no...

llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecode Proof of concept for CVE-2026-58116 CVSS 9.8 Critical: remote code execution in LLaMA-Factory = v0.9.5. The LLaMA-Factory WebUI hardcodes trustremotecode=True when loading a model src/llamafactory/webui/chatter.py:139 and...

CVE-2022-21907

CVE-2022-21907 Description - POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. - create by antx at 2022-01-17. Detail - HTTP Protocol Stack Remote Code Execution Vulnerability. - Similar to https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. - This problem...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.6.1 Remote Code Execution Authenticated Proof of Concept PostgreSQL Database from version 9.6.1 are vulnerable to Authenticated Remote Code Execution. Even if it isn't considered to be a vulnerability itself by the development team, this could be leveraged to gain...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...

cve-2021-21985_exp

cve-2021-21985 exploit 0x01 Vulnerability Point Analysis available at: https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=homerapid7-analysis 0x02 exploit Reconstruct the beans object to achieve RCE. Bean list: localizedMessageBundle vsanWorkerThreadFactory vsanThreadPoolImpl...

WP-Bricks-Exploit-CVE-2024-25600

BricksRCE Exploiter CVE-2024-25600 — WordPress Bricks Builder Unauthenticated RCE Authorized security assessment tool for CVE-2024-25600 Author: Sudeepa Wanigarathna · Tool: BricksRCE Exploiter v1.0 Main script: cve-2024-25600.py !IMPORTANT Authorized use only. This tool is for security research,...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates A critical RCE vulnerability in Windows TCP/IP stack CVE-2025-26686 leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now By Mark Mallia Type: Remote Code...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html PoC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as Administrator Powershell.exe -ExecutionPolicy UnRestricted -File...

CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...

Cerberus-React2Shell-Scanner-Exploit

Cerberus React2Shell - Weaponized Exploitation Framework ██████╗ ███████╗██████╗ ██████╗ ███████╗██████╗ ██╗ ██╗ ██╔════╝ ██╔════╝██╔══██╗██╔══██╗██╔════╝██╔══██╗██║ ██║ ██║ █████╗ ██████╔╝██████╔╝█████╗ ██████╔╝██║ ██║ ██║ ██╔══╝ ██╔══██╗██╔══██╗██╔══╝ ██╔══██╗██║ ██║ ╚██████╗ ███████╗██║...

CVE-2022-24086-CVE-2022-24087

CVE-2022-24086-CVE-2022-24087 The blog post that I written about Magento and Adobe Commerce RCE vulnerability CVE-2022-24086&CVE-2022-24087 for Picus Cyber Talent Academy Assignment can be found CVE-2022-24086&CVE-2022-24087.pdf...

exploit_laravel_cve-2018-15133

Laravel exploit for CVE-2018-15133 This code exploit CVE-2018-15133 and it is based on kosmiz's PoC and Metasploit's exploit for this vulnerability. I pretty much just did this for a box in Hack The Box, because I did not want to use Metasploit at the moment and as a excuse for practicing Python...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...

rails-rce-cve-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

CVE-2026-0740

CVE-2026-0740 Ninja Forms File Uploads = 3.3.26 - Unauthenticated Arbitrary File Upload to RCE Exploit for CVE-2026-0740 discovered by Selim Lanouar whattheslime. For a complete technical deep dive, read the full article on Lexfo's blog. Disclaimer This repository is provided for research and...

struts-rce-cve-2017-5638

struts-rce-cve-2017-5638 Struts-RCE CVE-2017-5638 This is a modified exploit that creates a webshell and provides a bash/cmd like interface to interact with the webshell in the console...

CVE-2022-27925-Revshell

Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925 / / / / / / / / / / / / / // / / / / / / // / / / // / //// // //.// ,/ CVE-2022-27925 usage: exp.py -h -t TARGET -m MASS -l LHOST -p LPORT options: -h, --help show this help message and exit -t TARGET, --target TARGET URl with...