1183489 matches found
CVE-2024-52380
CVE-2024-52380 Picsmize = 1.0.0 - Unauthenticated Arbitrary File Upload Description The Picsmize plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to...
CVE-2024-23692-EXP
CVE-2024-23692-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...
CVE-2021-42171
CVE-2021-42171 File upload to Remote Code Execution on Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...
CVE-2025-6218-POC
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...
android-c-sharp-rat-server
Android C R.A.T Server This is a pulgin built for the C R.A.T Server with the plugin system. 1. To install this plugin place the AndroidExtension.dll file from AndroidExtension/bin/Debug to /TutServer/bin/Debug/scripts 2. Then start the server and select the Plugins tab. 3. Select...
CVE-2021-20837
CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...
CVE-2024-3400-RCE-Scan
Cyberspace Mapping Dork Fofa app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye app:"Palo Alto Networks firewall httpd"...
CVE-2019-7609
CVE-2019-7609 Kibana Vulnerability allowing remote code execution due to a flaw in Kibana's Timelion visualizer Environment Setup docker 1. Run the attached docker-compose.yml. docker-compose up -d 2. Access http://127.0.0.1:5601 in a browser. Exploit 1. Prepare a reverse shell. $ nc -lvp 6666 2...
CVE-2020-5902-POC-EXP
CVE-2020-5902-POC-EXP Usage python3 f5rce.py scan iplisttxt python3 f5rce.py https://test.cn:443 ifconfig Scan Mode RCE Mode...
CVE-2026-63077
Unauthenticated Remote Code Execution in JetBrains TeamCity CVE-2026-63077 Overview This is a proof-of-concept exploit script for CVE-2026-63077. Organizations can use this script to validate their detection and remediation posture. For a full technical analysis of CVE-2026-63077, please read our...
CVE-2022-30190
CVE-2022-30190 Follina Educational Malware Development, Exploitation, Analysis and Mitigation A fully documented proof-of-concept demonstrating the Follina vulnerability - from social engineering delivery through to exploitation, forensic analysis, and patch development. ⚠️ Educational Use Only...
CVE-2025-31337
CVE-2025-31337 Security Advisory CVE ID: CVE-2025-31337 Published: 2025-03-15 CVSS Score: 9.8 Critical CWE: CWE-120 Buffer Copy without Checking Size of Input Description A critical buffer overflow vulnerability was discovered in the AIDR ChatBot Framework version 4.2.0 and earlier. The...
CVE-2024-4577
Fastest CVE-2024-4577 Exploitation Tool Description: PHP CGI Remote Code Execution The CVE-2024-4577 Exploit Tool exploit.py is a Python script designed to exploit web servers' specific vulnerability CVE-2024-4577. Based on the response content, it sends POST requests to a list of provided hosts ...
CVE-2018-16167
Installation and Execution Sequence 0. LogonTracer Installation Download the logontracer version 1.2.0, where a vulnerability was found, from dockerhub. $docker pull jpcertcc/docker-logontracer:v1.2.0 1. LogonTracer Execution Launch it in a container with the following command. $docker run ...
react2shellpoc
This repository contains a proof‑of‑concept demonstrating how a specific class of React Server Component vulnerabilities behaves inside a controlled, legal training environment. Manual ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ || CVE-2025-55182 React Serv...
CVE-2025-59287---WSUS-SCCM-RCE
CVE-2025-59287 - WSUS / SCCM RCE Based on the original exploit at: https://gist.github.com/hawktrace/76b3ea4275a5e2191e6582bdc5a0dc8b You can now specify the ysoserial.exe and execute whatever you want: https://hawktrace.com/blog/cve-2025-59287/ https://hawktrace.com/blog/cve-2025-59287-unauth/...
CVE-2022-36804-Bitbucket-RCE-Analysis
CVE-2022-36804: Bitbucket Remote Command Execution RCE Technical Analysis & Laboratory Exploitation of Null-Byte Argument Injection Vulnerability Summary CVE-2022-36804 is a high/critical Argument Injection vulnerability within the REST API of Atlassian Bitbucket Server and Data Center. While the...
CVE-2026-0073-PoC-Exploit
CVE-2026-0073 - Android ADB Wireless Debugging Auth Bypass Zero-Click | Remote Shell | Network Scanner | Educational Security Research Tool ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only...
CVE-2025-54123
CVE-2025-54123 Overview Authenticated Remote Code Execution in HoverFly's middleware API endpoint due to insufficient input validation and unsafe command execution. Attack Flow 1. Authentication Attacker authenticates to HoverFly using valid credentials or session token Obtains Bearer token via...