CVE-2017-0199

漏洞利用工具包 CVE-2017-0199 Exploit toolkit CVE-2017-0199 是一个方便的 python 脚本，为渗透测试人员和安全研究人员提供了一种快速有效的方法来测试 Microsoft Office RCE。 它可以生成恶意的 RTF/PPSX 文件，并将 metasploit / meterpreter / 其他 payload 交付给受害者，无需任何复杂配置。 此脚本已修改为支持 python 3。...

CVE-2024-47176-Scanner

Quick Start Example usage: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 Vulnerability Scanner cups-browsed What is CUPS And Why Does It Matter? CUPS Common Unix Printing System is an open-source framework for managing and controlling printers on UNIX and...

CVE-2023-22527-POC

CVE-2023-22527: Atlassian Confluence Vulnerability Introduction The CVE-2023-22527 vulnerability is a critical security flaw in Atlassian Confluence, a widely used collaboration and documentation platform. This vulnerability exists in both Confluence Data Center and Confluence Server, which are...

OffensivePascal-CVE-2010-2075

CVE-2010-2075 FreePascal implementation of CVE-2010-2075 Vulnerability UnrealIRCd 3.2.8.1 RCE by sending "AB; command" to any listening service. Any command you send is executed by the same user as UnrealIRCD runs as. This implementation launches a reverse shell to your listener. Step 1 Start a...

CVE-2022-22954-Testi

CVE-2022-22954-Testing Testing the CVE-2022-22954 Vulnerability VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result ...

nmap-vulnerability-scan-scripts

Synopsys CyRC Vulnerability Advisory: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

CVE-2019-16759-Vbulletin-rce-exploit

This repository does not have a README...

PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload

CVE-2025-3914 - Arbitrary File Upload in Aeropage Sync for Airtable WordPress Description The Aeropage Sync for Airtable WordPress plugin ≤ v3.2.0 is vulnerable to authenticated arbitrary file uploads due to insufficient file type validation in the aeropagemediadownloader function. Attack Vector ...

CVE-2022-22965

Spring4Shell Vulnerability - CVE-2022-22965 📕 Introduction The spring4shell vulnerability was named this way due to 2 vulnerabilities found and widely exploited by attackers in early 2022. One of these vulnerabilities is in the framework component called "Spring Cloud Functions" less critical and...

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ Overview CVE-2026-16723 is a Remote Code Execution RCE vulnerability in Fastjson 1.x 1.2.68 – 1.2.83. When Fastjson parses attacker-controlled JSON, a crafted @type value is turned into a class-resource lookup inside...

Langflow-cve-2026-33017-exploit

Langflow RCE Exploitation Framework CVE-2026-33017 · Authorized security testing for Langflow remote code execution Research & red-team tooling for validating CVE-2026-33017 against Langflow instances you are explicitly authorized to assess. Not for unauthorized use. Disclaimer This project is...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

CVE-2023-46604_ActiveMQ_RCE_Recurrence

1、进入activemq/bin，选择x64或x32，以管理员权限执行activemq.bin 访问8161端口下的admin，admin/admin 如果无法开启则需查看端口是否被占用，修改conf下的activemq.xml，我的机器MQTT端口被占用，所以进行了修改 2、在poc文件夹下开启http服务 3、使用java执行exp 交第一版的时候把自己真名提交了，于是把仓库删了重新交一版...

CVE-2019-0708

CVE-2019-0708 クラッシュ部分 BSOD は意図的に削除されました！ リモートデスクトップサービス – 以前はターミナルサービスとして知られていました – に、認証されていない攻撃者が RDPを使用してターゲットシステムに接続し、特別に細工されたリクエストを送信します。 この脆弱性は認証前であり、ユーザーの操作は必要ありません。 操作。 この脆弱性を悪用することに成功した攻撃者は、ターゲットシステム上で任意のコードを実行する可能性があります。 攻撃者は...

CVE-2025-32433

CVE-2025-32433 Una vulnerabilidad crítica en el servidor SSH de Erlang/OTP permite la ejecución remota de código RCE sin autenticación. La falla existe en el mecanismo de manejo de mensajes del protocolo SSH, permitiendo a los atacantes ejecutar comandos arbitrarios sin requerir credenciales de...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation As a security...

CVE-2026-41870

Apache Nutch Server (Nutch REST API) is vulnerable to unauthenticated remote code execution (RCE) via JEXL injection , stemming from missing authorization and unsafe reflection of externally-controlled input. This affects Apache Nutch versions 1.11 through 1.22 . The vulnerability carries a CVSS ...

CVE-2022-0848-RCE

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Change the host in bash file and run, then get the shell through RCE...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ 远程代码执行漏洞CVE-2023-33246 Exploit 使用方法: root@kitploit: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" 本工具的特点 由于心跳机制30s触发一次漏洞，所以工具延时35秒，保证命令被执行，随后再还原配置文件，所以该工具对漏洞进行利用的时候，并不会对环境产生影响！前提是你需要等待工具自然结束，而不是强制关闭它！ 免责声明:...

CVE-2022-30024

CVE-2022-30024 Tplink wr841 v10 rce exploit ⚠️ Disclaimer The code in this repository is provided as-is for educational and defensive security research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any misuse, damage, or legal...