325280 matches found
CVE-2023-41425-wonderCMS_RCE
CVE-2023-41425-wonderCMSRCE Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. For educational purposes only Requires knowledge of loginURL, admin access or the...
CVE-2018-16763
CVE-2018-16763 Fuel CMS 1.4.1 - Remote Code Execution - Python 3.x Original Script : Exploit-DB...
CVE-2021-41805
CVE-2021-41805 Hashicorp Consul RCE via API HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default operator:write permissions in one namespace can be used for unintended privilege escalation in a differe...
CVE-2022-29464
WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is a serious flaw in WSO2. The flaw is an unauthorised, unconstrained arbitrary file upload that enables unauthorised users to upload malicious JSP files to WSO2 servers and get Remote Code Execution RCE. the vulerable upload rou...
Valve-Press-CVE-2024-27956-RCE
Valve-Press-CVE-2024-27956-RCE Valve Press - CVE-2024-27956-RCE - SQL Injection...
text4shell-docker
Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...
CVE-2021-41773-Apache-2.4.49-
CVE-2021-41773-Apache-2.4.49- Penetration testing 1.1. Path Traversal Read /etc/passwd file !/bin/bash Script: exploitpathtraversal.sh Objective: Read /etc/passwd file from Apache 2.4.49 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ Exploiting...
CVE-2024-53677
CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...
cve-2021-42013-httpd
Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...
CVE-2022-44877-CWP7
CVE-2022-44877-CWP7 Control Web Panel 7 CWP7 Remote Code Execution RCE CVE-2022-44877 Unauthenticated Repository will get updated with POC soon...
CVE-2023-39362-cacti-snmp-command-injection-poc
Command injection vulnerability in Cacti CVE-2023-39362 - PoC This repo is forked from this repo: https://github.com/m3ssap0/cacti-rce-snmp-options-vulnerable-application Cacti is an open-source operational monitoring and fault management framework, continually evolving to meet the dynamic needs ...
CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE
CVE-2021-41773 – Apache HTTP Server 2.4.49 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this cod...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...
Fuel-CMS-Remote-Code-Execution-1.4--RCE--
This repository does not have a README...
CVE-2012-2982_python
CVE-2012-2982 Exploit python Hello, I am a security researcher and this is my first exploit. Webmin 1.580 has a RCE which is also CVE-2012-2982 To use This payload: 1. download 2. Open in text editor! 3. change targetIP to your target 4. change lhost to your own ip 5. change lport to the port...
CVE-2021-27928-POC
CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...
CVE-2023-27842
CVE-2023-27842 eXtplorer 2.1.15 – Insecure Permissions following Remote Code Execution Authenticated Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Version: 2.1.15 Installation git clone https://github.com/0xFTW/CVE-2023-2784...
bluefire-sharepoint-cve-2025-53770
🔐 Bluefire Redteam – SharePoint CVE-2025-53770 Detection & Remediation Toolkit This open-source toolkit provides security teams with battle-tested scripts to detect, assess, and remediate the critical SharePoint zero-day vulnerability CVE-2025-53770 CVSS 9.8 — currently being exploited in the wil...
CVE-2019-11447-EXP
CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability Before run the python script, run the nc command firstly. The default port is 1234. Then execute exploit.py, follow the tips and input required contents...