327468 matches found
CVE-2022-22963-PoC
CVE-2022-22963 RCE PoC Minimal example to reproduce CVE-2022-22963 remote code execution in org.springframework.cloud:spring-cloud-function-core. Exploit Run the server mvn spring-boot:run Make a request curl -X POST -H 'spring.cloud.function.routing-expression:...
Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911
Rocket.Chat Automated Unauthenticated Account Takeover to RCE CVE-2021-22911 Full unauthenticated RCE proof of concept for Rocket.Chat 3.12.1 CVE-2021-22911 The original PoC created by Enox. Currently this only works for accounts without 2FA. I will be adding 2FA bypasses shortly Created by...
Rainstorm
================================================================================================ BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License :...
CVE-2026-63146
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile and DbInstall::dbControl, combined with an SQL injection issue enabl...
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile and DbInstall::dbControl, combined with an SQL injection issue enabl...
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile and DbInstall::dbControl, combined with an SQL injection issue enabl...
Log4Jolokia
Log4Jolokia Description: Python3 implementation for leveraging and exploiting Log4J MBeans over Jolokia Usage: Generic Help: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target target...
CVE-2026-97789
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-97780
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97778
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97773
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97777
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97776
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97766
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97767
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97768
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97770
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-97765
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...