CVE-2026-104028

The Anton Extensions WordPress plugin, in versions up to and including 1.2.2 , is vulnerable to an unauthenticated arbitrary file upload. The flaw exists because the plugin fails to perform capability checks , nonce verification , or file-type validation when writing attacker-supplied content to ...

EUVD-2026-96738

The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Esecuzione di codice remoto tramite Use-After-Free in JScript.dll CVE-2025-30397 🧠 Descrizione Questo repository contiene un exploit proof-of-concept PoC per una vulnerabilità Use-After-Free nel motore JScript jscript.dll che interes...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

wotop

Web-On-Top-Of-Protocol WOTOP ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a tool meant to...

napper-for-tpm

,----------------, ,---------, ,-----------------------, ," ,"| ," Napper v1.3 for TPM ," | ," ," | +-----------------------+ | ," ," | | .-----------------Z | | +---------+ | | | Z | | | | -==----'| | | | ︶ ︶ z | | | | | | | | - | | |/----| ==== oo | | | | | | | ,/| | ," | -----------------' |,"...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

CVE-2021-22205

CVE-2021-22205 Pocsuite3 For CVE-2021-22205, Unauthorized RCE...

SpringShell

Spring Core RCE - CVE-2022-22965 After Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE On March 31 Spring released new versions which fixes the vulnerability. See section Patching. On March 31 a CVE-number was finally assigned to t...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Remote Code Execution python usage: python CVE-2019-19781.py http://192.168.3.244 0x01 download NSVPX-ESX-13.0-47.22nc64.zip https://www.citrix.com/downloads/citrix-gateway/ Statisches Netzwerk konfigurieren 0x02 nmap scan Scanning 192.168.3.244 65535 ports Discovered op...

LiMEaide

LiMEaide v2.0 by Daryl Bennett - kd8bnyatgmaildotcom About LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ This exploit builds upon the foundational work available at https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE. We have further developed the technique to achieve a reverse shell utilizing the Metasploit Framework...

CVE-2024-28397-Reverse-Shell

CVE-2024-28397-Reverse-Shell Reverse shell for CVE-2024-28397. Exploit works for js2py = v0.74 Requirements requests library pip install requests Python3 Netcat Or something that you can use as a listener for the reverse shell Usage For listener nc -lnvp 4444 For exploit python3 exploit.py...

cve-2021-45232-exp

apisixdashboardrce Don't be evil...

cve-2021-45232-exp

apisixdashboardrce Non essere malvagio...

pinky

Uploading a webshell is almost always the next step after exploiting a web vulnerability, but services like Cloudflare and the new generation of firewalls do a really good job preventing attackers to run commands in the target via HTTP or HTTPS. On the other hand, text content filtering and...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSS Score - 7.6 🔥 Description This High severity RCE Remote Code Execution vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE Remote Code...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat Remote Code Execution on Windows - CGI-BIN Apache Tomcat Remote Code Execution on Windows cgi-bin Usage: Usage: python CVE-2019-0232.py url cmd Test Environment: jdk8 apache-tomcat-8.5.39...

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 or others GIOP + send jta rmi or others...