270254 matches found
CVE-2026-33032-nginx-ui-vuln-lab
CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Disclaimer: This repository is intended for educational and authorised security research purposes only. All techniques demonstrated here should only be used against systems you own or have explicit written permission to test. The...
CVE-2024-11613-wp-file-upload
CVE-2024-11613-wp-file-upload استغلال بواسطة Chirag Artani https://3rag.com لثغرة CVE-2024-11613 في WordPress File Upload إليك المعلومات - إن إضافة WordPress File Upload لووردبريس معرضة لتنفيذ الأكواد عن بُعد، وقراءة الملفات التعسفية، وحذف الملفات التعسفية في جميع الإصدارات حتى 4.24.15 وما يتضمنه...
CVE-2026-20841
CVE-2026-20841 - Windows Notepad RCE PoC for a remote code execution flaw in Windows Notepad's markdown renderer. The markdown engine does not restrict URL protocols, allowing arbitrary protocol handlers to be triggered via clickable links. Disclaimers 1. Not my discovery. Credit goes to the...
CVE-2023-31446-Remote-Code-Execution
CVE-2023-31446-Remote-Code-Execution يحتوي المستودع على وصف لثغرة CVE-2023-31446 التي اكتشفها فريق Dodge Industrial لمنصة Dodge OPTIFY. معرف CVE: CVE-2023-31446 البائع: Cassia Networks المنتج: برنامج Cassia Gateway الثابت الإصدار: http:///bypass/config?type=sqs&keyId=&key=&queueUrl= بناءً على...
CVE-2026-37637
CVE-2026-37637 Preuve de concept pour CVE-2026-37637 - Exécution de code à distance dans Alexantr filemanager v1.0 via un téléversement de fichier sans restriction dans filemanager.php. Vue d'ensemble CVE-2026-37637 est une vulnérabilité d'exécution de code à distance affectant Alexantr...
EpSiLoNPoInTlnk
README EpSiLoNPoInTlnk CVE-2026-21510 - .LNK Generator Tool for generating .lnk files exploiting the CVE-2026-21510 vulnerability Windows ShellLink Remote Code Execution. Designed for offensive security research, authorized penetration testing, and vulnerability analysis. Legal Warning ⚠️ THIS TOO...
CVE-2024-56278
CVE-2024-56278 1️⃣ نوع المكوّن إضافة ووردبريس 2️⃣ تفاصيل المكوّن اسم المكوّن WP Ultimate Exporter الإصدار القابل للاستغلال = 2.9.1 معرّف المكوّن wp-ultimate-exporter رابط المكوّن https://wordpress.org/plugins/wp-ultimate-exporter/ 3️⃣ OWASP 2017: TOP 10 فئة الثغرة A4: تصميم غير آمن نوع الثغرة تنفيذ...
CVE-2024-4577
lol CVE-2024-4577 1. exploit command RCE value root@kitploit: python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory find...
CVE-2026-22241
CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...
CVE-2026-27966--RCE-in-Langflow
🚀 CVE-2026-27966 - Langflow RCE Exploit Tool All-in-One Exploitation Tool untuk CVE-2026-27966 📋 Deskripsi Tool ini adalah all-in-one exploit untuk CVE-2026-27966, sebuah kerentanan Remote Code Execution RCE pada Langflow yang memungkinkan attacker mengeksekusi perintah sistem secara remote. CVSS...
CVE-2023-22527-POC
CVE-2023-22527 &color=brighgreen%3E Description A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.Most recent supported...
smartermail-CVE-2026-23760-poc
SmarterMail-CVE-2026-23760-poc A proof-of-concept exploiting an authentication bypass via password reset API for the SmaretMail system administrator account. Vulnerability The vulnerability exists due to an authentication bypass vulnerability in the password reset API. The force-reset-password...
CVE-2021-43857
CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8. CVE-2021-43857 is a vulnerability marked as Critical priority CVSS 9.8 leading to remote code execution. This vulnerability works on all versions prior to 0.9.8. Tested onl...
CVE-2021-31805-POC
CVE-2021-31805-POC Vulnerability Information Apache Struts is a free, open-source MVC framework for creating elegant, modern Java web applications. It favors convention over configuration, can be extended using a plugin architecture, and ships with plugins that support REST, AJAX, and JSON...
CVE-2023-38646
CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...
CVE-2026-2441-PoC
CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...
CVE-2024-25641
CVE-2024-25641 root@kitploit: Exploit Title: Cacti 1.2.26 - RCE Authenticated Date: 06/01/2025 Exploit Author: D3Ext Vendor Homepage: https://cacti.net/ Software Link: https://github.com/Cacti/cacti/archive/refs/tags/release/1.2.26.zip Version: 1.2.26 Tested on: Kali Linux 2024 CVE: CVE-2024-2564...
CVE-2021-44228-Log4Shell-POC
CVE-2021-44228-Log4Shell-POC Complete POC for Infamous Log4j CVE-2021-44228 Prerequisites Download and Install Java from here, you can use jdk-8u181. Install IntelliJ Idea from here POC Step 1 : Clone this repository. Step 2 : Move Exploit.java file to a different folder. Like in my case I've...
Log4Shell
Log4Shell This repository is for Log4j 2021 CVE-2021-44228 Vulnerability demonstration and mitigation. What is Log4Shell? The CVE-2021-44228 / Log4Shell vulnerability consists of injecting vulnerable software with a malicious payload, which will ask Log4J to obtain a value from a third-party...