phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Recently we found a vulnerability in /type.php of phpcms 2008 source code. When attackers send crafted requests like "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", evil content in this case "@unlinkFILE;assert$POST1;" will be written into cache file in this...

Apache-RocketMQ-RCE-CVE-2023-37582-poc

This repository does not have a README...

CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE 5.0.0 a 5.5.5 y 6.0.0 a 6.6.5 Este es una PoC temprana de la RCE de Apache Solr De https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI permite configurar el servidor JMX de Solr mediante una solicitud HTTP POST. Al apuntarlo a un servidor RMI malicioso, un...

CVE-2020-0796

CVE-2020-0796 SMBGhost from ollypwn Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a...

CVE-2022-22963

CVE-2022-22963 In versions 3.1.6, 3.2.2, and earlier versions of Spring Cloud Function, when using the routing functionality, it is possible for a user to provide a specially crafted SpEL as a routing expression that can result in remote code execution and access to local resources. PoC Clone the...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

CVE-2024-4577-PHP-CGI-argument-injection-RCE

Inyección de argumentos en PHP CGI a RCE CVE-2024-4577 - código de explotación La vulnerabilidad CVE-2024-4577 en PHP CGI ha surgido como un fallo de seguridad crítico, permitiendo la ejecución remota de código mediante la inyección de argumentos. Descubierta en múltiples versiones de PHP, esta...

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

CVE-2021-25646-exp

CVE-2021-25646-exp Apache Druid CVE-2021-25646 herramienta de detección y explotación de ejecución remota de código Ingrese un nombre de dominio o IP:puerto para realizar la detección de vulnerabilidades Se puede ejecutar comandos en los objetivos vulnerables detectados Admite un solo objetivo...

CVE-2020-0796

CVE-2020-0796 Scanner = https://github.com/ButrintKomoni/cve-2020-0796 Remote overflow POC = https://github.com/jiansiting/CVE-2020-0796 SMBGhostRCEPoC = https://github.com/chompie1337/SMBGhostRCEPoC...

CVE-RCE

This repository does not have a README...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Description Confluence unauthorize remote code execution vulnerability : CVE-2022-26134 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Da...

CVE-2024-27198

CVE-2024-27198: La omisión de autenticación en Jetbrain Teamcity conduce a ejecución remota de código Overview TeamCity es un servidor de integración continua y despliegue que proporciona, de serie, pruebas unitarias continuas, análisis de calidad de código e informes tempranos sobre problemas de...

CVE-2024-44902

CVE-2024-44902 Vulnerability description A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. Affects Version Thinkphp v6.1.3 to v8.0.4 Exploit condition The thinkphp framework should have installed the Memcached extension. Vulnerability...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

jenkins-cve-2016-0792

Jenkins CVE-2016-0792 Exploit for Jenkins serialization vulnerability - CVE-2016-0792 Exploit database https://www.exploit-db.com/exploits/42394/ More information can be found here 1. Contrast Security 2. Pentester Lab Requirements 1. Python 3.6.x 2. requests library is required for this exploit ...

CVE-2025-24893

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC Vulnerability Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the...

CVE-2022-22963

CVE-2022-22963 Automatización educativa de prueba de concepto para CVE-2022-22963, demostrada en un entorno de laboratorio autorizado de Hack The Box. Descripción general CVE-2022-22963 es una vulnerabilidad de Spring Cloud Function que involucra la cabecera...

xmlrpc-common-deserialization

xmlrpc-common deserialization vulnerability This note is a technical note to detail the root cause and the associated exploit. You can find the initial disclosure here. The associated CVE is CVE-2019-17570. Description xmlrpc-common forms a shared code base between xmlrpc-client and xmlrpc-server...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023. authentication| complexity| vector ---|---|--- not available| not available| not available...