CVE-2023-46805

Title: Proof of Concept for CVE-2023-46805 - For Educational Use Only License: This work is placed under the Creative Commons Attribution 4.0 International License CC BY 4.0. You are free to share, copy, distribute, and transmit this work, to adapt it or use it for other purposes, provided the...

RCE-CVE-2025-3248

Authenticated CVE-2025-3248 Langflow Remote Code Execution This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit. Features Authenticated Command Execution: Run arbitrary system comman...

Centreon-RCE

Centreon-RCE Centreon v.19.04 Remote Code Execution exploit CVE-2019-13024 Revision of https://github.com/mhaskar/CVE-2019-13024 HOW TO USE: 1. Edit argument defaults for convenience, or don't bottom of script 2. If needed, edit 'editcommand' function to defeat defenses 3. '-v' for...

CVE-2022-26134

pip3 install -r requirements.txt use: python3 exp.py url "cmd" example: python3 exp.py http://192.168.1.1/ whoami...

Ctirix_RCE-CVE-2019-19781

CtirixRCE-CVE-2019-19781 Citrix ADC RCE cve-2019-19781 Video Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2024-41651

Blind SSRF to RCE Exploit - PrestaShop 8.1.7 This document outlines a Blind SSRF to RCE exploit on a fresh PrestaShop 8.1.7 docker installation. Prerequisites Ensure you have at least an outdated module installed, for example: psfacetedsearch Download the original package: Download psfacetedsearc...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 One-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

CVE-2025-22777

CVE-2025-22777 GiveWP – Donation Plugin and Fundraising Platform = 3.19.3 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.3 via...

cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2918-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a Poc I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework 📑 Table of Contents Legal Disclaimer & Ethical Notice Overview Key Capabilities Quick Start Guide Architecture & Feature Deep Dive Configuration Reference Automated Test Suite Remediation &...

CVE-2022-33891

CVE-2022-33891 PoC PoC for CVE-2022-33891, with ability to set custom payloads. Not vulnerable by default -- spark.acls.enable need to be TRUE. Intended Use Usage of this script is limited to personnel who are authorised to run the payload on the target hosts for vulnerability patching purposes...

CVE-2025-5394

CVE-2025-5394 – WordPress Alone Theme = 7.8.3 - Unauthenticated Arbitrary File Upload via Plugin Installation 🔥 Vulnerability Summary The WordPress theme Alone versions = 7.8.3 is vulnerable to an unauthenticated arbitrary file upload vulnerability. This flaw allows unauthenticated attackers to...

CVE-2026-45034

🧨 PHPSpreadsheet Phar Deserialization Exploit BypassprohibitWrappers + Remote Code Execution RCE on phpoffice/phpspreadsheet This repository provides a proof-of-concept PoC exploit for a critical vulnerability in the popular PHP library PHPSpreadsheet. The attack abuses the phar:// wrapper to...

CVE-2022-46169

Cacti | Auth Bypass | RCE | CVE-2022-46169 Cacti: Unauthenticated Remote Code Execution Exploit in Ruby Cacti Docker This is a dockerized application that is vulnerable to the Cacti RCE vulnerability CVE-2022-46169. Follow the link to get Cacti running...

wso2-rce-cve-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which which allows unauthenticated attackers to gain RCE on WSO2 servers via uploading...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...

CVE-2021-23369

CVE-2021-23369 Handlebars CVE-2021-23369 Vulnerability pip install requests Enter the Url : Vulnerability Description The package handlebars before 4.7.7 are vulnerable to Remote Code Execution RCE when selecting certain compiling options to compile templates coming from an untrusted source...

CVE-2023-26469

CVE-2023-26469 REC PoC This repository contains an exploit script for CVE-2023-26469, which allows an attacker to leverage path traversal to access files and execute code on a server running Jorani 1.0.0. Additionally, the script includes shell upload functionality for further exploitation...