CVE-2024-10470

CVE-2024-10470 WPLMS Learning Management System for WordPress = 4.962 – Unauthenticated Arbitrary File Read and Deletion Description The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file pat...

CVE-2021-21110

CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit...

CiscoExploit

CiscoExploit Cisco Scan IP/Port/HostName/Boot/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP RCE...

CVE-2022-1388-rs

CVE-2022-1388-rs Scanner and Interactive shell for CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust Summary To wrap things up here is an overview of the necessary conditions of a request for exploiting this vulnerability: Connection header must include X-F5-Auth-Token...

CVE-2019-12384

CVE-2019-12384 Jackson RCE And SSRF 0x01 python -m SimpleHTTPServer python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd throws java.io.IOException...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - Exploit toolchain XSS CSRF RCE PacketStorm WLB-2020080010 Disclaimer: this exploit toolchain was inspired by EDB-ID 20009. Goal The goal of this exploit toolchain is to replace EDB-ID 20009. Pros of this toolchain over EDB-ID 20009 exploit: Simple to use Reusab...

CVE-2025-66478-Exploit-Poc

Next.js CVE-2025-66478 PoC English | 한국어 This repository contains a Proof of Concept PoC for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It consists of a vulnerable Next.js application and a Python exploit script to test the vulnerability. What is CVE-2025-66478? This is...

CVE-2022-31199

CVE-2022-31199 - Netwrix Auditor RCE Exploit POCs 🔍 Vulnerability Overview CVE-2022-31199 is a critical insecure object deserialization vulnerability in Netwrix Auditor versions prior to 10.5. The vulnerability exists in an unsecured .NET Remoting service listening on TCP port 9004, allowing...

CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE

CVE-2021-41773 – Apache HTTP Server 2.4.49 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this cod...

CVE-2026-114053

A flaw was found in vLLM. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution in the server process. By submitting a crafted multimodal request specifying an attacker-controlled code revision, an attacker can cause the application to load and execute...

CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE | ---|--- Plugin| Divi Ajax Filter Divi Engine, premium — bukan di wordpress.org SVN Affected| semua versi = 5.1.2 lab memakai 3.1.8.4 dari mirror Patched| 5.1.3 11/08/2026 Tipe| CWE-98 — PHP Local File Inclusion, unauthenticated CVSS| 9.8 Critical...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode python go.py Enter target URL → select function menu. Detection Target Fast detect 8 basic info items...

CVE-2021-44593

CVE-2021-44593 Public disclosure of CVE-2021-44593. A SQL injection/arbitrary file upload/remote code execution vulnerability in Simple College Website. DESCRIPTION Simple College Website 1.0 is vulnerable to an unauthenticated union-based SQL injection in the "username" parameter of the...

CVE-2017-12149

CVE-2017-12149 Coded by 1337g Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

CVE-2025-59059-Misattributed-RCE-in-Apache-Ranger-Static-Analysis-Correction

CVE-2025-59059: Misattributed RCE in Apache Ranger a correction CVE: CVE-2025-59059 Affected versions: Apache Ranger "Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0." this is wrong, or at least misleading. NashornScriptEngineCreator...

OMIGOD_cve-2021-38647

OMIGODcve-2021-38647 CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. While executing payload Change HOST Command :Replace your command with Command here. such as id, whoami etc Credit https://github.com/horizon3ai/CVE-2021-38647 Follow us Vulnmachines YouTu...

Log4j2-RCE

Log4j2-RCE Log4j2 CVE-2021-44228 Reproduction and Echo Exploit...

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule Metric| Value ---|--- CVSS v4.0| 9.2 Critical CVSS v3.1| 8.1 High — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| 122 — Heap-based Buffer Overflow Introduced| June 2008 — v0.6.27 Discovered| April 2026 — DepthFirst Research...

CVE-2024-27348

CVE-2024-27348 For Ethical Usages only, Any harmful or malicious activities are not allowed. And it's your own responsability You Can Read the analysis for the vulnerability from here: https://blog.securelayer7.net/remote-code-execution-in-apache-hugegraph/ Apache HugeGraph Server RCE Scanner...

CVE-2025-55182

React2Shell Ultimate Scanner Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-55182 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-55182 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Server...