Telerik_CVE-2019-18935

TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...

CVE-2021-41773

CVE-2021-41773 - Remote Code Execution in Apache 2.4.49 PoC for CVE-2021-41773 as I just found over-complicated exploits and this one goes straight to the Remote Code Execution. Usage Just specify the IP address running the vulnerable Apache 2.4.49 server with -i and the desired system command wi...

CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly assess what sorts of protections and fixes are available. Originally found by Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle had a "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" YouTube video up f...

CVE-2022-1329

WP Elementor 3.6.0/1/2 Remote Code Execution Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Version: 3.6.0,...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

mitigation-cve-2019-9787

mitigation-cve-2019-9787 POC 1. simply xss : 2. simple csrf: attacker's website code--- https://github.com/kuangting4231/wordpress.github.io 3. csrf remote code execution: attacker's website code--- https://github.com/kuangting4231/assigment1.github.io mitigation 1. fix the logic flaw in the...

pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

CVE-2022-26810

CVE-2022-26809 RCE Exploit CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the...

CVE-2025-55182-bypass

CVE-2025-55182 Header Bypass Next-Action header bypass for CVE-2025-55182. Achieves React RSC RCE without distinctive headers, bypassing WAF rules. Key Finding The Next-Action header is NOT required for exploitation. Attack Vector| Next-Action Header| WAF Detection ---|---|--- Original CVE|...

Log4j2-CVE-2021-44228

CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web mvn dependency:treejava INFO | | +- org.springframework.boot:spring-boot-starter-logging:jar:2.6.1:compile INF...

CVE-2025-14174-Poc

CVE-2025-14174 PoC Exploit Overview This repository contains a fully functional Proof-of-Concept PoC exploit for CVE-2025-14174 also tracked as EUVD-2025-203113, a critical memory corruption vulnerability in the ANGLE graphics engine. The flaw stems from improper restriction of operations within...

CVE-2021-22941

Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

staystaystay

staystaystay staystaystay is a proof of concept exploit for CVE-2021-1585, a man in the middle or evil endpoint RCE issue affecting Cisco ASA Device Manager ASDM. The issue was originally discovered by Malcolm Lashley and disclosed in the summer of 2021. However, at the time I was looking at this...

roundcube-cve-2025-49113-lab

"DISCLAIMER: Educational Use Only" Roundcube Webmail RCE – CVE-2025-49113 Lab This repository documents my step-by-step exploitation of Roundcube Webmail CVE-2025-49113 in a controlled lab to obtain the secret stored in /secret.txt. ⚠️ Disclaimer All work was performed against a lab / training...

CVE-2017-5638-POC

CVE-2017-5638-POC Vulnerable server setup and proof of concept of CVE-2017-5638 remote code execution vulnerability in an Apache component Server The vulnerable server runs in a docker container, the image can be created using the Dockerfile, running this in the same folder of it: docker build...

CVE-2022-21907

CVE-2022-21907 Description POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by Malwareman at 2022-09-17. Detail HTTP Protocol Stack Remote Code Execution Vulnerability. Similar to https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. This problem exists...

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Polyglot Payload In the last weeks in November 2025, an interesting vulnerability CVE-2025-64512 was disclosed in pdfminer.six, a popular Python project to process PDF files, used in particular in AI pipelines. The vulnerability enables remote code execution by deserializing...

log4j2-vuln-lab

⚠️ Disclaimer : This project is intended for security learning and technical research only. All vulnerability environments are set up locally, and no real targets have been tested. Do not use it for illegal purposes. The risk of using this project is borne by the user. Log4j2 Vulnerability...

CVE-2022-22947

CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

Kernelhub

CVE-2003-0352 Describe Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. ImpactVersion Product| C...