CVE-2023-34152

CVE-2023-34152 RCE vulnerability affecting ImageMagick 6.9.6-4. This vulnerability allows the attacker to execute commands on the victim system. Thus, allowing for Remote Command Execution. This is a POC which was inspired by fullwaywang discovery of CVE-2023-34152. Vulnerability Disclosure Usage...

EUVD-2026-104049

Missing Authentication for Critical Function CWE-306 and Missing Authorization CWE-862 in the /libp2p-http ingress server StartIngressServer in cmd/sam-node/node.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass...

CVE-2019-11932

CVE-2019-11932 Modify the listening address attacker's and the listening port in the exploit.c file Following hex code: 3139 322e 3136 382e 322e 3732 2034 3434 3420 Compile the code: gcc -o exploit egiflib.c exploit.c Run the compiled file ./exploit exploit.gif copy/paste the output into a gif...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection Usage usage: cve-2021-26084confluencerce.py -h --url URL --cmd CMD --shell CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection optional arguments: -h, --help show this help message and exit --url URL, -u URL Target Url --cmd CMD, -c CMD...

CVE-2024-36401-PoC

CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401 GeoServer Vulnerable Versions of GeoServer are prior to 2.23.6 | 2.24.4 | 2.25.2 !!! FOR SECURITY TESTING PURPOSES ONLY !!! DO NOT USE THIS ON SYSTEMS THAT YOU DO NOT OWN UNLESS YOU HAVE EXPRESS PERMISSION !!! To run... 1. Start a...

CVE-2023-46974

CVE-2023-46974 POC Description Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product...

CVE-2018-16763

Fuel CMS 1.4.1 - Remote Code Execution FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Install git clone https://github.com/Trushal2004/CVE-2018-16763.git cd CVE-2018-16763/ python3 -...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...

CVE-2026-112041

A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryptographically weak prng. The attack may be performed from...

CVE-2026-112040

A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the component Sign-In. This manipulation of the argument Referer causes...

CVE-2026-112037

A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCorePlugin/lib/vendor/gapi/gapi.class.php of the component Google Analytics Client. Executing a manipulation can lead to improper certificate validation. The...

CVE-2026-112039

A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administrative Console. The manipulation of the argument dmcommand...

CVE-2026-112038

A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. The manipulation leads to cross site scripting. Remote...

next.js-scanner

next.js-scanner Detection scanner for CVE-2025-55182 React Server Component Remote Code Execution Vulnerability...

CVE-2022-42889-POC

CVE-2022-42889-POC Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889. What's the Issue : Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefi...

EUVD-2026-104048

A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function dmBaseLinkTag::text of the file dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php of the component dmWidget. Performing a manipulation of the argument text...

CVE-2026-112042

A cross-site scripting (XSS) vulnerability exists in the diem-project diem software within the dmWidget component. The flaw is located in the dmBaseLinkTag::text function of the file dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php. By manipulating the text argument, an attacker can trigger the ...

CVE-2021-25646

Apache Druid Remote Code Execution CVE-2021-25646 by j2ekim Usage python exp.py -u --url -c --command python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn" Vulnerability Reproduction Article https://www.adminxe.com/2109.html Disclaimer Any direct or indirect consequences an...

cve-2021-44228-rce-poc

CVE-2021-44228 Remote Command Execution PoC This repository allows security researchers to experiment with remote code execution by offering an implementation of an attack server that loads a custom exploit on a vulnerable application that contains log4j. ⚠️ The tool is intended for self-assessmen...

F5-BIG-IP-POC

F5-BIG-IP POC Written in Go, a collection of POCs for CVE-2020-5902, CVE-2021-22986, CVE-2022-1388. Other F5 POCs will be added later. author:160team.west9B For use only by security researchers with authorization. Comply with cybersecurity laws. Any consequences are your own responsibility, and t...