Prestashop-CVE-2024-34716

Exploit Script for CSRF and Reverse Shell Attack This script automates a CSRF Cross-Site Request Forgery exploit to upload a PHP reverse shell on a target's web server and execute it. The reverse shell is delivered as a ZIP file via a crafted CSRF payload, which is triggered when a privileged use...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...

CVE-2023-33538-msf

CVE-2023-33538 – TP-Link TL-WR940N/841N Command Injection Metasploit module This Metasploit auxiliary module targets an authenticated command injection vulnerability in TP-Link TL-WR940N V2/V4 and TL-WR841N V8/V10 routers. The issue lies in the vulnerable ssid1 parameter used in WlanNetworkRpm.ht...

CVE-2022-2992

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare DSC Mitigation PowerShell Kougyoku Gentou | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." The mitigation is to disable Print Spooler service. Well, most websites say to do this on...

cve-2020-29007

CVEID : CVE-2020-29007 Name of the affected products and versions : Mediawiki Score all versions up to 0.3.0 Problem type : CWE-96: Improper Neutralization of Directives in Statically Saved Code ‘Static Code Injection’ Summary Score is a Mediawiki extension which generates musical notation based ...

CVE-2023-21716-POC

CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...

cve-2017-7269

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: http://" in a PROPFIND request, as exploited in the wild ...

CVE-2023-46805

Title: Proof of Concept for CVE-2023-46805 - For Educational Use Only License: This work is placed under the Creative Commons Attribution 4.0 International License CC BY 4.0. You are free to share, copy, distribute, and transmit this work, to adapt it or use it for other purposes, provided the...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 "CustomDetection" Update Check Remote Code Execution Vulnerability. Usage: python3 cve-2022-27438poc.py Details in the report at gerr.re. Steps to reproduce For other affected products, you have to change the update server and update configuratio...

ProFTPD_CVE-2015-3306

m4ud ProFTPD 1.3.5 RCE exploit CVE : 2015-3306! ProFTPd 1.3.5 RCE Usage: ProFTPD.py options Options: -h, --help show this help message and exit -l LHOST, --lhost=LHOST Local IP Required for Reverse Shell, -p LPORT, --lport=LPORT Port Required for Reverse Shell, -t TARGET, --target=TARGET Vulnerab...

RCE-CVE-2025-3248

Authenticated CVE-2025-3248 Langflow Remote Code Execution This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit. Features Authenticated Command Execution: Run arbitrary system comman...

CVE-2024-21413

CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u sender email address -p sender password -d...

CVE-2024-3094

🚨 CVE-2024-3094 — XZ Utils Backdoor 🧠 Overview CVE-2024-3094 is a critical supply chain compromise affecting the widely used XZ Utils compression library. A malicious actor inserted a stealth backdoor into upstream releases, enabling remote code execution RCE via tampered liblzma. ⚠️ This...

CVE-2025-22777

CVE-2025-22777 GiveWP – Donation Plugin and Fundraising Platform = 3.19.3 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.3 via...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework 📑 Table of Contents Legal Disclaimer & Ethical Notice Overview Key Capabilities Quick Start Guide Architecture & Feature Deep Dive Configuration Reference Automated Test Suite Remediation &...

Scanners-for-CVE-2020-0796-Testing

Scanners-for-CVE-2020-0796-Testing Scanners List - Microsoft Windows SMBv3 Remote Code Execution Vulnerability CVE-2020-0796 Microsoft Windows SMBv3 Remote Code Execution Vulnerability CVE-2020-0796 ScannersList A critical remote code execution vulnerability exists in the way that the Microsoft...

CVE-2022-33891

CVE-2022-33891 PoC PoC for CVE-2022-33891, with ability to set custom payloads. Not vulnerable by default -- spark.acls.enable need to be TRUE. Intended Use Usage of this script is limited to personnel who are authorised to run the payload on the target hosts for vulnerability patching purposes...

CVE-2024-4577

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

CVE-2026-45034

🧨 PHPSpreadsheet Phar Deserialization Exploit BypassprohibitWrappers + Remote Code Execution RCE on phpoffice/phpspreadsheet This repository provides a proof-of-concept PoC exploit for a critical vulnerability in the popular PHP library PHPSpreadsheet. The attack abuses the phar:// wrapper to...