spring-shell-vuln

spring-shell-vuln Spring4Shell: Spring core RCE vulnerability Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965. Some information about the Spring4She...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 Unauthenticated Remote Code Execution Uses Python 3 Running without Docker: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py Running with Docker:...

CVE-2020-14882

CVE-2020-14882 coherence shellsession calc.exe import requests url = 'http://:/console/images/%252E%252E%252Fconsole.portal' \ '?nfpb=true&pageLabel=HomePage1&handle=com.tangosol.coherence.mvel2.sh.ShellSession' \ '%22java.lang.Runtime.getRuntime.exec%27calc.exe%27;%22'.format'192.168.1.53', '700...

CVE-2025-6058

🚨 CVE-2025-6058 — WordPress WPBookit ≤ 1.0.4 Unauthenticated File Upload Exploit Unauthenticated Arbitrary File Upload Exploit targeting WordPress WPBookit Plugin ≤ 1.0.4 Exploit allows remote shell upload and full command execution. Author: 0xgh057r3c0n 📌 About The Vulnerability CVE-2025-6058 is...

cve-2021-31630

This script automatically exploits vulnerability in OpenPLC Web Server v3 You will be able to create an automatic Rever Shell with the server without having to use manual techniques. CVE-2021-31630 Detail Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code...

CVE-2026-47668

CVE-2026-47668 — DbGate Remote Code Execution Unauthenticated RCE in DbGate JSON Script Runner dbgate-serve ≤ 7.1.8. Assessment tool: CVE-2026-47668.py — authorized testing only. | ---|--- CVE| CVE-2026-47668 Severity| Critical Product| DbGate / dbgate-serve Affected| ≤ 7.1.8 Fixed| ≥ 7.1.9 CVSS...

CVE-2026-90920

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...

CVE-2026-0073

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated network scanner and exploitation tool for CVE-2026-0073 , a vulnerability in the Android Debug Bridge daemon adbd that allows unauthenticated Remote Code Execution RCE and interactive shell access via Wireless Debugging. This tool is...

CVE-2025-81110-PoC

CVE-2025-81110-PoC Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. This repository contains a professional-grade exploit for a critical vulnerability in Gogs versions prior to 0.13.0. The exploit leverages a logical flaw where the Gogs API fails to...

CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE

CVE-2019-3980 – OpenNetAdmin 18.1.1 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this code...

CVE-2022-22947

Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

CVE-2026-71981

Cypht CVE-2026-71981 PoC This is a PoC for CVE-2026-71981 Insecure deserializaion RCE. Result of executed command is printed in response from logout request after the tags. Use --print-all to also print the whole response. Versions vulnerable: v2.12.2 Install dependencies and execute This script...

VTIGER-CRM-RCE-CVE-2026-23697

This repository does not have a README...

EXPLOIT-CVE-2024-7804

CVE-2024-7804 — PyTorch Distributed RPC Unsafe Deserialization RCE Self-contained lab + exploit for CVE-2024-7804 : remote code execution in PyTorch's distributed RPC framework torch.distributed.rpc through unsafe deserialization of untrusted data CWE-502. Affected: torch Note: this advisory was...

CVE-2019-16759

CVE-2019-16759 Vbulletin RCE Exploits...

CVE-2021-26855-Exchange-RCE

CVE-2021-26855-Exchange-RCE Microsoft Exchange Proxylogon Exploit Chain EXP Analysis + CVE-2021–26855 + CVE-2021–27065 Reproduction Summary...

CVE-2016-3088

CVE-2016-3088 - Remote Code Execution in Apache ActiveMQ...

CVE-2021-21985

CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. VMware has evaluated the severity of this issue to be in the Critical severity range with a...

CVE-2019-12840.py

CVE-2019-12840.py POC Fake Shell: CVE-2019-12840 Authenticated RCE - Webmin Package Updates...

CVE-2022-25226

ThinVNC 1.0b1 - Authentication Bypass to Remote Code Execution CVE-2022-25226 Author: krill-x7 Reference: https://fluidattacks.com/advisories/sinatra Overview ThinVNC 1.0b1 contains an authentication bypass vulnerability CVE-2022-25226 allowing remote attackers to interact with the backend...