spring-framework-rce

spring-framework-rce CVE-2022-22965 Requirements 1. tomcat8 8 Usage 1. Download springframeworkrce-0.0.1-SNAPSHOT.zip, unzip, and rename to ROOT.war. 2. Replace the ROOT folder or ROOT.war in the webapps folder of tomcat. 3. Switch to the bin directory of tomcat and run .\catalina.bat run. Testin...

QuickHeal

QuickHeal CVE-2017-5005 for Quick Heal Antivirus Advisory Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the...

CVE-2019-15858

CVE-2019-15858 Unauthenticated Remote Code Execution at Woody Ad Snippets PoC The vulnerabilities discovered by nintechnet and exploit released by GeneralEG & X-Vector An unauthenticated options import vulnerability combined with a stored XSS vulnerability can lead to remote code execution in the...

Blackash-CVE-2025-55182

🚨 CVE-2025-55182 — Critical React Server Vulnerability 🧠 What It Is ⚛️ A critical security flaw in React Server Components RSC 🧨 Caused by unsafe deserialization 🌐 Exploitable via network requests 🔓 No authentication required ☠️ Can lead to Remote Code Execution RCE ✅ This means attackers could...

cve-2024-1708-connectwise_rce_reproduction

CVE-2024-1708 / CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass & Remote Code Execution CVSS Score: 8.4 CVE-2024-1708 – 10.0 CVE-2024-1709 CWE: CWE-22 Path Traversal, CWE-288 Authentication Bypass Using an Alternate Path Affected Software: ConnectWise ScreenConnect formerly...

ShadowRay-RCE-PoC-CVE-2023-48022

PoC for a remote command execution vulnerability in Ray framework CVE-2023-48022 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. The Ray framework, an essential tool for Python-based AI and machine learning applications, has encountered a significant security...

CVE-2024-23742

CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 and CVE-2025-71260 BMC FootPrints Pre-Authenticated Remote Code Execution Chain BMC FootPrints Pre-Authenticated Remote Code Execution Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if BMC FootPrints instance is vulnerable to...

CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 detector script by Massimiliano Brasile WHAT HAPPENED January 6th, 2020 I was advised of a security issue apparently affecting most versions of PrestaShop the warning was shared by PS team only internally on 3rd January 2020. After some digging, I have discovered the...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow Field| Value ---|--- CVE| CVE-2024-49113 Alias| LDAP Nightmare CVSS 3.1| 9.8 — CRITICAL CWE| CWE-122 — Heap-based Buffer Overflow Discovered| SafeBreach published PoC January 2025 Exploitation|...

watchguard_cve-2022-26318

watchguardcve-2022-26318 Watchguard RCE POC CVE-2022-26318 !/usr/bin/python3 -- coding: utf-8 - - CVE-2022-26318 import socket import ssl import gzip Remote WatchGuard XTM or FireWare OS RHOST = "1.1.1.1" Local host with nc listener: nc -l 8.8.8.8 8888 LHOST = "8.8.8.8" def buildPayloadLHOST:...

CVE-2020-9380

PoC IPTV Smarters Exploit Usage python gld.py -u http://www.pirate-ilegal-tv.com/ -i Vulnerability file includes/ajax-control.php: ?php / @ PHP 5.6 @ Decoder version : 1.0.0.1 @ Release on : 24.03.2018 @ Website : http://EasyToYou.eu / sessionstart; if fileexists"functions.php" includeonce...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Remote Code Execution Vulnerability Video demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control component contains a remote code execution vulnerability because it allows 'javascript:' URIs to be passed as the argument, which is...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...

CVE-2024-48359

CVE-2024-48359 - Qualitor = v8.24 Unauthenticated RCE PoC CVE-2024-48359 | Qualitor = v8.24 RCE Description Qualitor is a platform for business process management, and this system is present in various companies in Brazil that can be identified simply by using Google dorking. Our team identified ...

CVE-2025-24893

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Template Injection SSTI vulnerability via Groovy template injection in the SolrSearch endpoint. Vulnerability Type : Server-Side Template Injection SSTI Component : XWiki SolrSearch RSS feed Impact : Remote Code Execution Affected Version ...

CVE-2015-9331

CVE-2015-9331 POC Vulnerability Description CVE-2015-9331 is an arbitrary file upload vulnerability in the WordPress plugin WP All Import. This vulnerability allows an unauthenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution. Affected Versions...

CVE-2015-3073

CVE-2015-3073 This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL required. If just URL given, it will RCE, else it...