POC-CVE-2026-23520

CVE-2026-23520 — Arcane Lifecycle Label RCE OS Command Injection in Arcane Docker Management 1.13.0 Overview Arcane is a modern, web-based Docker management platform. Versions prior to 1.13.0 are vulnerable to an authenticated Remote Code Execution RCE via OS command injection in the updater...

CVE-2026-40858

camel-infinispan Remote Aggregation Repository Unsafe Deserialization Reproducer CVE-2026-40858 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-infinispan component, tracked as CVE-2026-40858. The ProtoStream-based remote aggregation repository serializes ea...

CVE-2021-41773

CVE-2021-41773 — Apache Path Traversal & RCE Exploitation Writeup of the TryHackMe "Modern Web Stacks" room, focused on exploiting CVE-2021-41773 , a path traversal vulnerability in Apache HTTP Server 2.4.49 that leads to remote code execution when modcgi is enabled. Summary Item| Detail ---|---...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 Spring-Cloud-Function-SpELRCE Vulnerability Reproduction Requires Docker environment Method 1 to start the vulnerable environment git clone https://github.com/RanDengShiFu/CVE-2022-22963.git;cd CVE-2022-22963;bash Start.sh Method 2 to start the vulnerable environment...

CVE-2007-2447-RCE

This exploit helps you to get a reverse shell, exploting Samba 3.0.20 3.0.25 · When executing the script with python3 with the --help parameter, it asks us for a series of parameters --lhost LHOST your host ip where the shell will be received --lport LPORT your port port where the shell will be...

CVE-2021-41773

CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi For use only in controlled environments that you own. Do not use against systems without authorization. Description Proof of concept developed to demonstrate and understand the vulnerability CVE-2021-41773 , present in Apache HTTP Server 2.4.4...

CVE-2023-36844_Juniper_RCE

CVE-2023-36844JuniperRCE A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 to achieve Remote Code Execution phpinfo in Juniper JunOS within SRX and EX Series products.Modified from original exploit developed by @watchTowr . Shodan dork :...

CVE-2025-7775-PoC

CVE-2025-7775 | NetScaler ADC RCE PoC ⚠️ Disclaimer: This is a hypothetical PoC for educational purposes only.Segment NetScaler networks CVE-2025-7775 does not exist. Use only in an isolated lab. Overview Simulated exploit for a hypothetical unauthenticated RCE in Citrix NetScaler ADC/Gateway...

CVE-2021-26855-exploit-Exchange

CVE-2021-26855 exploit-Exchange Auto Scan the World and auto exploit rce By EOG Team...

CVE-2022-47986

CVE-2022-47986 Aspera Faspex Pre Auth RCE https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Poc Usage: python3 poc.py https://xxxxx whoami...

CVE-2026-43858

A stack-based buffer overflow vulnerability exists that could allow a remote authenticated attacker to achieve arbitrary code execution . No specific affected products, components, root causes, or remediation details are provided in the documents. Exploitation details are not provided.

CVE-2024-36401-PoC

CVE-2024-36401-PoC This repository contains a Proof of Concept PoC script for CVE-2024-36401, a vulnerability that can be exploited to gain remote code execution on the target server. Features Assign a reverse shell listener using Perl. Encode commands using Base64. Make requests to the target...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...

CVE-2020-0796

CVE-2020-0796: SMBGhost - Analysis and Ethical Exploitation Introduction CVE-2020-0796, also known as "SMBGhost," is a critical security vulnerability affecting Microsoft Windows operating systems. It falls under the "wormable" category, meaning it can rapidly propagate across networked systems...

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...

CVE-2026-23744-script

A script for CVE-2026-23744, which exploits MCPJam Inspector versions = 1.4.2. Based off the curl command used here: https://github.com/advisories/GHSA-232v-j27c-5pp6 Make sure your /etc/hosts file is correct and points to the domain/vhost of the target...

CVE-2024-23780

CVE-2024-23780 Exploit for Netbox This script exploits CVE-2024-23780, which allows remote code execution RCE on Netbox instances. Usage python netboxexploit.py --url --username --password Parameters --url: URL of the Netbox instance. --username: Username for authentication with the Netbox...

CVE-2026-23744-PoC

CVE-2026-23744-PoC PoC about vulnerability in MCP Server. automated for the part of the post with the correct body. vulnerable path: /api/mcp/connect method via curl: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

CVE-2024-21413-Outlook-Assessment

title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...

WSUSResponder

🧰 WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT 🎯 Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...