PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...

PoC-CVE-2017-0199

PoC-CVE-2017-0199 Exploit toolkit for vulnerability RCE Microsoft RTF. About this vulnerability: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...

CVE-2024-47076

CUPS Common UNIX Printing System, the printing system of Linux and Unix systems, is a service related to print management and distributing tasks among devices. A security vulnerability named CVE-2024-47076 has been disclosed on this service. You can use the relevant scripts to learn whether your...

exim-rce-quickfix

This repository does not have a README...

CVE-2024-56145-craftcms-rce

Antes de ejecutar el script de nuevo, haz fuser -k 6666/tcp Uso - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 Se puede usar un comando personalizado como python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i es tu IP o la IP de tu VPS úsala ejecutando ipconfig / ifconfig. Por...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 is a CVSS 8.1 High Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Unauthenticated Arbitrary File Upload viasanitizefilename Bypass CVSS 8.1 High | Affected: = 1.1.3...

CVE-2021-21972

CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key functions of...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server 认证远程代码执行 RCE Oracle Fusion Middleware 的 Oracle WebLogic Server 产品（组件：控制台）存在漏洞。受影响的支持版本包括 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0 和 14.1.1.0.0。该漏洞易于利用，未经身份验证的攻击者可通过 HTTP 网络访问破坏 Oracle WebLogic Server。成功利用此漏洞可导致 Oracle WebLogic Server 被接管。 概念验证 PoC 1： 使用...

POC_CVE-2026-46716

CVE-2026-46716 — RCE entre inquilinos en Nezha Monitoring mediante bypass de autorización en la API Cron Un entorno de laboratorio para reproducir y detectar CVE-2026-46716 , una vulnerabilidad crítica en Nezha Monitoring donde el endpoint POST /api/v1/cron carece de comprobaciones de privilegios...

CVE-2021-31630-OpenPLC_RCE

CVE-2021-31630-OpenPLCRCE Exploit for Authenticated Remote Code Execution on OpenPLC v3 Webserver...

CVE-2026-40217-PoC

CVE-2026-40217 — LiteLLM Guardrail Sandbox Escape LiteLLM POST /guardrails/testcustomcode — Sandbox Escape leading to Remote Code Execution RCE as root in default Docker deployment. Field| Value ---|--- CVE| CVE-2026-40217 CVSS| 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-913...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Vulnerability A deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16. Setup Change the Values inside the...

CVE-2019-11043

Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Vulnerability Overview PHP-FPM Remote Code Execution Vulnerability CVE-2019-11043 During the Real World CTF organized by Chaitin Tech, foreign security researcher Andrew Danau discovered while solving a CTF challenge that sending the %0a symbol to t...

BotCon

BotCon Attlasian Confluence Un-Authenticated Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763-FuelCMS-1.4.1-RCE The original version of this exploit is here: https://www.exploit-db.com/exploits/50477 I modified it so it can work on Vulnerability Capstone of TryHackMe...

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

Impact PHPCSUtils versions 1.0.0-alpha1 through 1.2.2 contain an arbitrary code execution vulnerability in PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey. The vulnerable method is reached by any sniff that extends AbstractArrayDeclarationSniff and calls...

CVE-2024-0757-Exploit

CVE-2024-0757 Exploit Description The Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to arbitrary file uploads through insecure file uploads in a zip archive in all versions up to, and including, 4.3000000023. This makes it possible for unauthenticated...

react2shellpoc

Este repositorio contiene una prueba de concepto que demuestra cómo se comporta una clase específica de vulnerabilidades de React Server Component dentro de un entorno de formación controlado y legal. Manual ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ ||...

CVE-2023-41425

CVE-2023-41425 描述 WonderCMS 版本 3.2.0 至 3.4.2 中存在一个跨站脚本漏洞，允许远程攻击者通过上传特制脚本到 installModule 组件来执行任意代码。 这是 prodigiousMind 原始漏洞利用的修改版本，扩展了漏洞利用功能，使其能够在本地提供完整的漏洞利用服务，无需依赖外部网络连接。 当你在海上迷失，且发现你的自行车出了问题的时候，它很有用…… 注意：仓库中留下的 xss.js 仅用于演示目的，脚本运行时将用你的配置覆盖它。 用法 usage: exploit.py -h -u URL -lh LHOST -lp LPORT -sh...