CVE-2026-41179

CVE-2026-47668 بيئة اختبار لثغرة RCE في rclone REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q REF2: https://github.com/pssec-io/CVE-2026-41179 rce.py استغلال RCE عبر /operations/fdinfo، يعيد توجيه المخرجات إلى stderr لتسهيل الاستخدام ./rce.py uname -a exit status 1...

CVE-2021-23369

CVE-2021-23369 Handlebars CVE-2021-23369 Vulnerability pip install requests Enter the Url : Vulnerability Description The package handlebars before 4.7.7 are vulnerable to Remote Code Execution RCE when selecting certain compiling options to compile templates coming from an untrusted source...

CVE-2019-15642

CVE-2019-15642 تنفيذ التعليمات البرمجية عن بُعد في Webmin مُصادق عليه استخدام python: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker لـ Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root...

CVE-2015-1578-PoC

CVE-2015-1578-PoC अवलोकन यह CVE-2015-1578 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है, जो विंडोज पर Achat 0.150 beta7 में एक बफर ओवरफ्लो कमजोरी है। इसका दोहन एक निर्मित UDP पैकेट के माध्यम से रिमोट कोड निष्पादन की ओर ले जाता है। उद्देश्य यह PoC एक साफ, न्यूनतम और अच्छी तरह से संरचित एक्सप्लॉइट विक...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...

CVE-2024-4577

CVE-2024-4577 - PHP CGI आर्गुमेंट इंजेक्शन RCE सारांश CVE-2024-4577 एक गंभीर PHP CGI आर्गुमेंट इंजेक्शन भेद्यता है जो विंडोज़ सिस्टम को प्रभावित करती है जहाँ PHP CGI मोड में चल रहा है। यह दोष दूरस्थ हमलावरों को विशेष रूप से तैयार URL के माध्यम से PHP की कमांड लाइन में आर्गुमेंट इंजेक्ट करने की...

CVE-2025-44608

CVE-2025-44608 مشروع CloudClassroom-PHP الإصدار 1.0 عرضة لـ RCE عبر حقن SQL. البائع: https://github.com/mathurvishal/CloudClassroom-PHP-Project رابط البرنامج: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC الخطوة 1: انتقل إلى عنوان URL المتأثر وقم...

Ofbiz-RCE

📌 Apache OFBiz RCE Exploit CVE-2024-38856 This Python script allows exploiting a Remote Code Execution RCE vulnerability in Apache OFBiz versions 18.12.15 through unauthorized access to the endpoint /webtools/control/forgotPassword/ProgramExport. 🛠️ Description CVE : CVE-2024-38856 Type : Incorrec...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails में Action Pack, 3.2.22.2 से पहले, 4.x में 4.1.14.2 से पहले, और 4.2.x में 4.2.5.2 से पहले के संस्करणों में, दूरस्थ हमलावरों को एप्लिकेशन के render method के अप्रतिबंधित उपयोग का लाभ उठाकर मनमाना Ruby कोड निष्पादित करने की अनुमति देता है।...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Description Confluence unauthorize remote code execution vulnerability : CVE-2022-26134 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Da...

CVE-2017-7269

EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...

CVE-2020-7961

CVE-2020-7961 Exploit script for CVE-2020-7961 Unauthenticated Remote code execution via JSONWS References & inspirations original blogpost : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html synacktiv blogpost :...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...

Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

This repository does not have a README...

ProxyLogon

ProxyLogon لـ Python3 ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists user's mail. --mails...

Peyara-FileUpload

عنوان الاستغلال: Peyara Remote Mouse v1.0.1 رفع ملفات تعسفي دون مصادقة التاريخ: 2025-01-06 مؤلف الاستغلال: tmrswrr رابط البرنامج: https://peyara-remote-mouse.vercel.app/ المنصة: Windows الإصدار: v1.0.1 تم اختباره على: Windows 10 USAGE : python3 combinedscript.py إنشاء ملف LNK خبيث evil.lnk...

CVE-2022-22947-Rce_POC

CVE-2022-22947-RcePOC Batch URL detection of Spring Cloud Gateway CVE-2022-22947 Usage py Spring-Cloud-Gateway.py UrlsPath After execution, a gateway.log file is generated, where '+', '-', '' indicate 'vulnerable', 'not vulnerable', and 'request error' respectively...

CVE-2024-57366

CVE-2024-57366 Exploit A robust exploit for CVE-2024-57366 that allows remote code execution on vulnerable routers through MAC address validation bypass and command injection. This is a post-authorization exploit that requires the router "Remote Control" feature to be on, and the administrative...

CVE-2023-24100

CVE-2023-24100-Nuclei-Templates IoT RCE nuclei templates CVE-2023-24100 CNVD-2023-24100...

cve-2021-41773

cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49. RCE POC PoC Payload curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh Follow us Vulnmachines YouTube Twitter...