CVE-2022-0540-RCE

Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540） English • 中文 Exploit Details As seen in author's blog, atlassian provided a long list of affected plugins the vast majority of which were false positives, and the author listed several actual affected plugins According to the prompted...

Computer-Security-Equifax-2017

Educational repo demonstrating real-world software vulnerabilities: Apache Struts2 CVE-2017-5638 RCE, data exfiltration, weak encryption, and mitigation strategies sanitization, monitoring, crypto best practices. Red team vs blue team demo of OS security flaws: exploit, persistence backdoor, and...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...

CVE-2019-19609

CVE-2019-19609 Strapi = 3.0.0-beta.17.8 authenticated remote code execution...

dockerevil

dockerevil A simple repository to store my security flaws in the docker technology 2016 - 2017 Docker API Privilege EscalationLPE/RPE Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile Docker SUDO Privilege Escalation PoC Nmap Scripts 2019 CodeStudent1995 Based Exploit OpenShif...

CVE-2026-108812

A security vulnerability exists in SEMCMS versions up to 5.0 due to improper authorization within an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. This flaw allows for remote manipulation, potentially leading to unauthorized actions. The vendor has not responded to re...

EUVD-2026-97285

A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMSUser.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly...

CVE-2017-12615-PoC

CVE 2017-12615 Apache Tomcat Windows RCE ⚠️Warning This is a proof of concept environment and exploit for known CVEs, strictly for learning and educational purposes. Do not use these scripts or techniques on systems you do not own or have explicit permission to test. Unauthorised access or...

regreSSHion

regreSSHion Exploit PoC Description This repository contains an exploit targeting CVE-2024-6387 regreSSHion, a vulnerability in OpenSSH's server sshd on glibc-based Linux systems. It exploits a race condition in the signal handler of OpenSSH, potentially leading to remote code execution as root...

webdav_exploit

webdavexploit An exploit for Microsoft IIS 6.0 CVE-2017-7269 based on https://github.com/edwardz246003/IISexploit but works remotely usage python exploit.py -d http://www.eliuha.com/eliuha...

CVE-2024-30850-chaos-rat-rce-poc

https://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc/assets/146861503/ac03c8c7-54b3-4280-9f29-719c44af5192 CHAOS RAT v5.01 web panel RCE CVE-2024-30850, CVE-2024-31839 https://github.com/tiagorlampert/CHAOS This exploit works by spoofing an agent callback for an XSS CVE-2024-31839, and...

CVE-2023-36884-MS-Office-HTML-RCE

CVE-2023-36884: MS Office HTML RCE with crafted documents On July 11, 2023, Microsoft released a patch aimed at addressing multiple actively exploited Remote Code Execution RCE vulnerabilities. This action also shed light on a phishing campaign orchestrated by a threat actor known as Storm-0978,...

CVE-2024-29943

CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. This repository contains PoC, Exploit and Analysis Slides for CVE-2024-29943. Demo Demo.mp4 Slides Slides.pdf Reproduce Information Github Git Commit:...

Remote-Access-Trojan-Database

Remote-Access-Trojan-Database All samples in this database can only used for research purpose. the status of all RAT families including programming language used to write RAT stubs, the debut year of RAT families and source to determine the debut year. The forth column represents the source based...

Schwarze-Sonne-RAT

Schwarze-Sonne-RAT SS-RAT Schwarze-Sonne-Remote-Access-Trojan...

DFIR_Resources_REvil_Kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack Yesterday Sophos and Huntress Labs identified that Kaseya, a remote management provider popular with MSPs, was compromised to deploy a supply chain ransomware attack. A large number of organisations wer...

CVE-2023-35086-POC

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/tin-z Brief description ASUS RT-AX56U V2 & RT-AC86U router firmwares below or equal to version 3.0.0.4.38650460 and 3.0.0.438651529 respectively have a format string vulnerability in the detwan.cgi function of the httpd service that can cau...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic unauthorized access leading to arbitrary file upload/RCE vulnerability check script...

CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar README project base on https://github.com/Y4er/CVE-2020-2555 and weblogiccmd test on 12.2.1.4.0 and jdk 1.8.0221 Reference 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2...

CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Unauthenticated Remote Code Execution via Angular-Base64-Upload Library for more details: blog Introduction angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the angular-base64-upload/demo/server.p...