327887 matches found
CVE-2025-61765_PoC
Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...
cve-2025-55182-node
CVE-2025-55182 Next.js RCE Exploit Tool δΈζζζ‘£ | ζΌζ΄εηεζ !CAUTION β οΈ DISCLAIMER - READ BEFORE USE This tool is intended ONLY for: Security researchers conducting vulnerability verification Authorized penetration testing with explicit permission Educational and learning purposes Unauthorized access to...
FOQUZ Platform SQL Injection
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
pg_dump Code Execution
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CrocoTime employee working time management system Code Execution
The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-96355
The Drupal Webform module (versions 0.0.0 to 6.2.12 and 6.3.0 to 6.3.1 ) is vulnerable to Code Injection due to improper neutralization of special elements used in a template engine. The module fails to sufficiently exclude specific format templates from token replacement, allowing an attacker to...
CVE-2026-96375
The Drupal Cloud module (versions 0.0.0 to 7.0.1 ) is vulnerable to Improper Certificate Validation (CWE-295). The Kubernetes and VMware integrations fail to properly validate TLS certificates when connecting to remote API endpoints. This allows an Adversary in the Middle (AiTM) to intercept conn...
CVE-2026-96376
The Cloud module in Drupal (versions 0.0.0 to 7.0.1) contains an OS Command Injection vulnerability (CWE-78 ) within its Kubernetes integration . The issue stems from insufficient sanitization of user-controlled Git branch and repository URL values before they are passed to shell commands. An att...
CVE-2021-35215
CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView Deserialization RCE, requires login. PoC POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests: 1 DNT: 1...
0-click-RCE-Exploit-for-CVE-2024-51793
CVE-2024-51793 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 This repository contains a proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress plugin, leading to remote...
CVE-2023-25194
CVE-2023-25194 https://hackerone.com/reports/1529790 Poc POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accept:...
CVE-2026-3854-PoC
CVE-2026-3854 PoC β GitHub RCE via X-Stat Push Option Injection For educational and authorized security research purposes only. Do not use against any system without explicit written permission. Overview CVE-2026-3854 is a Remote Code Execution vulnerability in GitHub Enterprise Server's and...
pyrocms-ssti-fix
π‘οΈ PyroCMS SSTI Fix Drop-in security fix for CVE-2023-29689 - Server-Side Template Injection leading to Remote Code Execution in PyroCMS 3.9. The Problem PyroCMS allows admin users to edit templates stored in the database. Without sandboxing, attackers with admin access can inject malicious Twig...
xwiki_solrsearch-rce-exploit
solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 β XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...
CVE-2024-36401
CVE-2024-36401 Remote Code Execution RCE Vulnerability In Evaluating Property Name Expressions GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution RCE by...
CVE-2026-27876
π¨ CVE-2026-27876 - Grafana Critical RCE via SQL Expressions A chained vulnerability allowing arbitrary file writes through SQL Expressions, leading to full Remote Code Execution RCE on the host. π Overview CVE ID : CVE-2026-27876 Severity : Critical CVSS v3.1: 9.1 Published : March 27, 2026 CWE :...
CVE-2025-49113
CVE-2025-49113 Roundcube β€ 1.6.10 Post-Auth RCE via PHP Object Deserialization...
CVE-2025-68613-n8n-rce-analysis
Matrix GIF...
xxl-job
xxl-job Executor RESTful API Unauthorized Access RCE Use the Execution Log Console to Obtain the Results of Successful Command Execution: Example: /joblog/logDetailPage?id=xxxx View the jdk Environment Variables String var3 = System.getProperties.toString; System.out.printlnvar3; Command Executio...
SambaHunter
SambaHunter It is a simple script to exploit RCE for Samba CVE-2017-7494. Now works with Python3. Many of the required Python2 libraries are deprecated e.g. commands Added logging to show which shares are writeable. If 'Exploit Finished' appears but no shares are writeable, the exploit didn't wor...