319495 matches found
CVE-2024-25600
TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-25600 Exploit WordPress plugin Bricks Builder has RCE vulnerability CVE-2024-25600 WordPress plugin Bricks Builder RCE vulnerability CVE-2024-25600 exploit script, multi-POC hybri...
-CVE-2014-6271
/ || | | | | | | | / || | | |/ \ / | |/ / \ | || | | | | | | \ | || | | | | | | ' / | | || || | | | || | || . \ |/|| |||||/|| ||/ ||\ CVE-2014-6271 โ Shellshock Remote Code Execution via Bash Environment Variable Injection "A flaw hidden in Bash for decades that shook the foundations of the...
CVE-2026-14762-PoC-Exploit
CVE-2026-14762 โ CodeโProjects Hotel & Tourism Reservation 1.0 SQL Injection Exploit -orange -red Fully featured, multiโthreaded, timeโbased blind SQL injection exploit for CVEโ2026โ14762. Targets the /admin/rooms.php endpoint of the CodeโProjects Hotel & Tourism Reservation application version...
CVE-2024-56264
CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...
CVE-2024-23740
CVE-2024-23740 ะัะพะฑะปะตะผะฐ ะฒ Kap ะดะพ ะฒะตััะธะธ 3.6.0 ะฝะฐ macOS ะฟะพะทะฒะพะปัะตั ัะดะฐะปะตะฝะฝะพะผั ะทะปะพัะผััะปะตะฝะฝะธะบั ะฒัะฟะพะปะฝััั ะฟัะพะธะทะฒะพะปัะฝัะน ะบะพะด ัะตัะตะท ะฝะฐัััะพะนะบะธ RunAsNode ะธ enableNodeClilnspectArguments. ะกััะตััะฒัะตั ะธะฝััััะผะตะฝั, ะฟัะตะดะฝะฐะทะฝะฐัะตะฝะฝัะน ะดะปั ะฐะฒัะพะผะฐัะธะทะฐัะธะธ ะฟัะพัะตััะฐ ะฟะพะธัะบะฐ ััะทะฒะธะผะพััะตะน ะฒ Electron:...
CVE-2021-41805
CVE-2021-41805 - HashiCorp Consul Enterprise RCE !WARNING ะะ ะะะะะะ ะะขะะะ ะะข ะะขะะะขะกะขะะะะะะกะขะ: ะญัะพั ะธะฝััััะผะตะฝั ะฟัะตะดะฝะฐะทะฝะฐัะตะฝ ะกะขะ ะะะ ะขะะะฌะะ ะดะปั ะะะ ะะะะะะขะะะฌะะซะฅ ะฆะะะะ! ะัะฟะพะปัะทะพะฒะฐะฝะธะต ััะพะณะพ ะธะฝััััะผะตะฝัะฐ ะดะปั ะฐัะฐะบ ะฝะฐ ัะตะปะธ ะฑะตะท ะฟัะตะดะฒะฐัะธัะตะปัะฝะพะณะพ ะพะฑะพัะดะฝะพะณะพ ัะพะณะปะฐัะธั ะฏะะะฏะะขะกะฏ ะะะะะะะะะซะ. ะัะฒะตัััะฒะตะฝะฝะพััั ะทะฐ...
CVE-2025-55182-React2Shell-Async-Scanner
โก React2Shell CVE-2025-55182 / CVE-2025-66478 - Async RCE Scanner Prototype-pollution โ Remote Code Execution via React Server Actions Async, version-first, output-based canary detection - no blind guessing !WARNING For authorised security research and penetration testing only. Scanning systems...
CVE-2026-12277
CVE-2026-12277 Frontend File Manager Plugin WordPress = 23.6 - Unauthenticated Arbitrary File Deletion to RCE Summary Field| Value ---|--- CVE| CVE-2026-12277 Plugin| Frontend File Manager Plugin nmedia-user-file-uploader Affected| = 23.6 Type| Unauthenticated Arbitrary File Deletion CVSS| 8.7 HI...
CVE-2021-40444
Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Background Although many PoC are already around the internet, I guessed to give myself a run to weaponizing this vulnerability, as what I...
CVE-2019-1619
CVE-2019-1619 Powershell Script to build the token needed for Authentication Bypass. I was in a pentest and found a server vulnerable to CVE-2019-1619. I couldn't leverage the metasploit module due to restricted access so I exploited it manually. I created this script to automate the building of...
PoC_CVE-2017-3164_CVE-2017-1262
Apache Solr Poc CVE-2017-3164 CVE-2017-12629 This folder contains example exploits for Apache Solr CVE-2017-3164 CVE-2017-12629 To be use ONLY for education purposes and with full permission of the Apache Solr Server owner. You will need to know the IP or DNS name of the Apache Solr server and th...
CVE-2024-8856
CVE-2024-8856: WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability Overview CVE-2024-8856 is a security vulnerability found in the WP Time Capsule plugin for WordPress that allows unauthenticated users to upload arbitrary files to the server. This can lead to remote code executio...
CVE-2024-23897
CVE-2024-23897: Jenkins Arbitrary File Read Vulnerability Leading to RCE Introduction This repository contains a Python script that exploits a critical vulnerability CVE-2024-23897 in Jenkins, leading to arbitrary file read and remote code execution RCE. This vulnerability allows an unauthenticat...
CVE-2021-41773
CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...
CVE-2025-27636-Practical-Lab
๐ก๏ธ CVE-2025-27636 โ Practical Exploitation Lab for Apache Camel ๐ Overview CVE-2025-27636 is a critical Remote Code Execution RCE vulnerability in Apache Camel , specifically in the camel-exec component. It stems from a subtle but dangerous issue: TheDefaultHeaderFilterStrategy performs...
CVE-2025-1307
Newscrunch Exploit CVE-2025-1307 ๐จ Overview This exploit targets a critical vulnerability CVE-2025-1307 in the Newscrunch WordPress theme. The flaw allows authenticated users Subscriber and above to upload arbitrary files due to missing capability checks in the newscrunchinstallandactivateplugin...
CVE-2021-3129
CVE-2021-3129 Mass Scan Tools For Laravel = V8.4.2 Debug Mode Remote Code Execution RCE | Python Reference Ambionics.io PHPGCC Chain PHPGCC Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2 Monolog/RCE3 Monolog/RCE4 Environment...
CVE-2026-8037-POC
CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode python go.py Enter target URL โ select function menu. Detection Target Fast detect 8 basic info items...
CVE-2019-0232
Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...
RCE_CVE-2024-7954-
RCECVE-2024-7954- The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. CRITICAL Exploit: POST...