sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

CVE-2025-55182

CVE-2025-55182 Toolkit & Lab Educational Only Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182. For educational and authorized testing only. Features Root-cause writeup, visuals, and lab: see React2ShellDeconstructingaPerfect10RCE.pdf and the attack-path...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 is a CVSS 8.1 High Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Unauthenticated Arbitrary File Upload viasanitizefilename Bypass CVSS 8.1 High | Affected: = 1.1.3...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell brief A static, dependency-free brief on the critic...

CVE-2025-55182

CVE-2025-55182 — React Server Components Unauthenticated RCE Severity: Critical — CVSS 10.0 CWE: CWE-502 Deserialization of Untrusted Data Vendor: Meta Facebook Disclosed: December 3, 2025 Overview CVE-2025-55182 is a maximum-severity unauthenticated remote code execution RCE vulnerability in Rea...

CVE-2023-43284

CVE-2023-43284 DLink Model DIR-846 Authenticated Remote Code Execution. This flaw abuse QoS POST parameter in the router to exploit an Authenticated Remote Code Execution. Doesn't require QoS be enabled! -h, --help show this help message and exit -x , --command Command to be executed Default: id ...

Exploit for CVE-2026-111497

CVE-2026-111497: Interim Mitigation for Azure Application Gate...

PoC-CVE-2022-22965-Spring4Shell

PoC — CVE-2022-22965 Spring4Shell Disclaimer: This repository is intended for educational and research purposes only. All exploit scripts must be used exclusively against systems you own or have explicit written permission to test. The author is not responsible for any misuse or damage caused by...

Automation-for-Juniper-cve-2023-36845

Automation for Juniper CVE:2023-36845 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of IP addresses, sends a request to each, and determines whether the system is vulnerable based on the response. Usage To use the script, run it fro...

CVE-2024-38063

CVE-2024-38063 Overview In August 2024, Microsoft released a patch for a Windows TCP/IP Remote Code Execution RCE vulnerability. Some researchers have already published Proofs of ConceptPoC for this vulnerability, and around the same time, PatchPoint researchers also completed their analysis and...

CVE-2026-48907-

CVE-2026-48907 — Joomla JCE Editor Unauthenticated RCE Scanner & Exploit CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% A Python-based vulnerability scanner and exploitation tool for CVE-2026-48907 , a critical unauthenticated remote code execution vulnerability in the JCE Joomla Content Editor...

CVE-2022-22965

POC Spring4Shell CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof Of Concept. The naming of this flaw is based on the similarities to the infamous Log4j LOG4Shell. Details about this vulnerability https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...

internet-of-vulnerable-things

Internet of Vulnerable Things The results of my small term paper on the topic of the Internet of Vulnerable Things. Abstract This paper provides a practical demonstration of how insecure the Internet of Things is by hacking a typical IoT device. Several vulnerabilities were identified in the...

laravel-8.4.2-rce

laravel-8.4.2-rce Setup enviroment git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve Usage python3 exploit.py http://pwnme.me:8000 /var/www/html/laravel/storage/logs/laravel.log 'uname -a'...

CVE-2022-25765-exploit

CVE-2022-25765 — Command Injection in pdfkit Description CVE-2022-25765 is a command injection vulnerability affecting pdfkit Ruby gem in versions 0.8.7.2. The vulnerability has a CRITICAL severity with CVSS 9.8, as it allows remote command execution without authentication. The problem lies in th...

Additive-Vulnerability-Analysis-CVE-2021-41773

Additive-Vulnerability-Analysis-CVE-2021-41773 Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2026-13714 — WPL Real Estate Unauthenticated RCE Realtyna Organic IDX plugin + WPL Real Estate for WordPress 5.3.0 Unauthenticated arbitrary file upload via...

MS15-034

MS15-034 MS15-034 POC "The current IIS server version is a vulnerable version with a known vulnerability CVE-2015-1635, MS15-034. Exploiting this vulnerability poses a risk of remote code execution or causing a blue screen of death. Test command: wget --header=""Range:...