333309 matches found
CVE-2015-3224
CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...
CVE-2024-1651-PoC
CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...
CVE-2022-2274
CVE-2022-2274 A POC OF CVE-2022-2274 openssl The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X8664 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will...
CVE-2018-16370
CVE-2018-16370 In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.More details see https://github.com/lazyphp/PESCMS-TEAM/issues/2...
cve-2016-6662
About Some help to explot CVE-2016-6662 Warnings Make sure to change the attacker IP in the c file before compiling Credit All credit to original discoverer. Writeups here: http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html Discussion here:...
CVE-2018-19276
CVE-2018-19276 OpenMRS Insecure Object Deserialization RCE From https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607 Insecure object deserialization allows Arbitrary Code Execution without needing to log in. IP restrictions on Webservices module do not prevent thi...
React2Shell_cve-2025-55182
React Server Components RCE - CVE-2025-55182 Hello! I hope you're having a great day! 😊✨ What's This About? React Server Components versions 19.0.0 , 19.1.0 , 19.1.1 , and 19.2.0 have a serious security problem. The packages react-server-dom-parcel, react-server-dom-turbopack, and...
Telegram-0-Click-RCE-SECURITY-VULNERABILITY-ANALYSIS-REPORT
🔴 Telegram 0-Click RCE Vulnerability Analysis Report ZDI-CAN-30207 | CVSS 9.8 CRITICAL | Unpatched as of 2026-03-30 Author: Dennis Kim @gameworkerkim Date: March 30, 2026 Contact: [email protected] 📋 Summary Badges 1. Vulnerability Overview Executive Summary This is a zero-click remote code...
xwiki_solrsearch-rce-exploit
solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...
CVE-2021-21972
CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key functions of...
CVE-2026-23744-MCPJAM-RCE-exploit
CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept targets a vulnerable MCP Model Context Protocol service exposed by the target application. The vulnerability allows an attacker to supply arbitrary server configuration parameters through the /api/mcp/connect endpoint. Affected Endpoi...
CVE-2025-49844
CVE-2025-49844 – Redis Lua Parser Use-After-Free Lua chunk-name GC race leading to Redis 8.2.1 use-after-free and remote code execution. Overview Redis embeds Lua 5.1 for scripting. In versions up to 8.2.1 the luaYparser function does NOT anchor the chunk name string on the Lua stack before...
pwnacle-fusion
pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...
CVE-2019-18818_CVE-2019-19609
Exploits for CVE-2019-18818 and CVE-2019-19609 This repository contains a Python script to exploit two vulnerabilities: CVE-2019-18818 and CVE-2019-19609. CVE-2019-18818 This vulnerability allows an attacker to reset the password of an admin user in the Strapi CMS. Usage 1. Modify the target and...
CVE-2024-12828-PoC
CVE-2024-12828-PoC Webmin CGI Command Injection Remote Code Execution Vulnerability...
CVE-2026-48939
CVE-2026-48939 — iCagenda Joomla RCE Exploit Pre-Auth Arbitrary File Upload → PHP Code Execution Overview CVE-2026-48939 is a CVSS 10.0 critical vulnerability in the iCagenda events calendar extension for Joomla. The frontend event registration form's file attachment feature enforces access...
Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529-
Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529- CTT-Enhanced iOS Safari Exploit based on CVE-2025-43529...
CVE-2019-0232
CVE-2019-0232 Apache Tomcat Remote Code Execution on Windows - CGI-BIN Apache Tomcat Remote Code Execution on Windows cgi-bin Usage: Usage: python CVE-2019-0232.py url cmd Test Environment: jdk8 apache-tomcat-8.5.39...
CVE-2025-49844_POC
CVE-2025-49844POC CVE-2025-49844 POC -h View help information ··· Redis has a Redis Lua script remote code execution vulnerability CVE-2025-49844. The root cause of this vulnerability is a design flaw in the interaction between Redis's Lua script engine and its memory management logic. ··· ···...