CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly assess what sorts of protections and fixes are available. Originally found by Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle had a "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" YouTube video up f...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-36804 affecting most BitBucket versions 8.3.1 See the full advisory here https://jira.atlassian.com/browse/BSERV-13438 All credit to TheGrandPew for discovery The script will automatically detect public repositories located on bitbucket...

CVE-2024-30270-PoC

This script is designed to exploit vulnerabilities in a Mailcow instance using Cross-Site Scripting XSS and Remote Code Execution RCE. The script aims to: Inject an XSS payload into a Mailcow web interface. Use the XSS payload to execute unauthorized actions. Achieve RCE by overwriting a server...

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Unauthenticated Remote Command Injection. Overview This repository contains a Proof of Concept PoC reverse shell script for exploiting CVE-2022-36553, a critical vulnerability in Hytec Inter HWL-2511-SS devices. The script is a practical demonstration,...

cve-2023-30253

CVE-2023-30253 Description Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data. Documentation CVE-2023-30253 GitHub Advisory: GHSA-9wqr-5jp4-mjmh Setup git clone...

exim-rce-cve-2018-6789

Exim RCE CVE-2018-6789 Learning Environment Description This is a set of files, scripts, notes, ... to set up an environment to investigate the Exim RCE CVE-2018-6789. It can be used to debug Exim, write exploits, trace Exim function calls, learn about Exim's custom memory management storeblocks,...

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

CVE-2019-11043 1. Vulnerability Description When Nginx processes requests containing %0a with fastcgisplitpathinfo, it causes PATHINFO to be empty due to the newline character \n. PHP-FPM has a logic flaw when handling an empty PATHINFO. An attacker can craft a request to achieve remote code...

git-lfs-RCE-exploit-CVE-2020-27955-Go

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 Go version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub CLI gh, GitHub...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Detection Artifact Generator for WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f See our blog post for technical details Detection in Action python watchTowr-vs-WatchGuard-CVE-2025-9242.py --rhost...

2017-11882_Generator

CVE-2017-11882 A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. 2017-11882Generator This is ...

CVE-2020-9484

CVE-2020-9484 Click the image to watch the video Usage Make it execuateble chmod +x CVE-2020-9484 ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

CVE-2023-22518

CVE-2023-22518 Exploit Description This repository contains an exploit script for CVE-2023-22518. The script allows for unauthorized file uploads, potentially leading to remote code execution or other security vulnerabilities. Disclaimer This repository is for educational and informational purpos...

Python-exploit-CVE-2020-25213

Description The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload or...

CVE-2024-4577-nuclei

CVE-2024-4577-nuclei Payload: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input Test URL: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload /cgi-bin/php.exepayload Ref:...

rapid7-CVE-2026-15409

CVE-2026-15409 This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 Improper Control of Generation of Code 'Code Injection' Critical 2024 Summary CVE-2024-0195 is a critical code injection vulnerability in the spider-flow 0.4.3 web application, specifically in the FunctionService.saveFunction function of the FunctionController.java file. An attacker...

CVE-2023-46604

CVE-2023-46604 Set up docker-compose containing 2 images: the victim machine and the target machine according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Open an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen fo...

CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 Description This vulnerability allows arbitrary command execution on systems running Apache Unomi version 1.5.1, by exploiting MVEL expression language injection. Project Page GitHub - Vulhub - Unomi CVE-2020-139...

CVE-2022-22916

CVE-2022-22916 CVE-2022-22916, O2OA RCE Remote Command Execution O2OA RCE Remote Command Execution CVE-2022-22916 O2OA is an enterprise information system custom development platform solution based on J2EE distributed architecture, integrating mobile office and smart office, supporting private...

CVE-2025-31324_PoC

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...