1201058 matches found
CVE-2026-15409
π CVE-2026-15409 β SonicWall SMA 1000 Erlang RCE via WebSocket Proxy ProofβofβConcept exploit for CVE-2026-15409 β unauthenticated remote code execution on SonicWall SMA 1000 series appliances via the Erlang distribution protocol tunneled over WebSocket. π Overview CVE-2026-15409 is a critical...
CVE-2025-5781
FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...
nuclei-template-cve-2025-31324-check
SAP CVE-2025-31324 Check Overview This template is designed to check the presence of the SAP NetWeaver CVE-2025-31324 vulnerability. This vulnerability allows unauthorized users to upload JSP files through the /developmentserver/metadatauploader endpoint, which can lead to potential remote code...
CVE-2025-58434_CVE-2025-59528
CVE-2025-58434CVE-2025-59528 PoC Script CVE-2025-58434 Flowise -lp...
CVE-2023-43838
CVE-2023-43838 An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. Additional Information 1. Create alert.svg with the following content: alert"huntr.dev"; 2. Host .S...
CVE-2024-6782-PoC
CVE-2024-6782-PoC Usage: python3 callibre.py --target http://target:8080/ Unauthenticated remote code execution via Calibreβs content server in Calibre = 7.14.0...
CVE-2026-0163-EXP
CVE-2026-0163 DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview A functional remot...
CVE-2025-53770-SharePoint-Deserialization-RCE-PoC
CVE-2025-53770-SharePoint-Deserialization-RCE-PoC A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE mitigations immediately. Severity: Critical. commands...
CVE-2024-47176
PoC: Unauthenticated RCE on cups-browsed π Vulnerability information Published : 2024-09-26 Base Score : 5.3 MEDIUM EPSS Score : 0.06% Probability of exploitation. Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description : CUPS is a standards-based, open-source printing system, and...
CVE-2026-25512
CVE-2026-25512: Remote Code Execution via Command Injection in TNEF Handler - Group-Office CVSS 4.0 Vector : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Table of Contents Summary Affected Versions Technical Details Root Cause Source to Sink Flow Exploitation Automated Exploit...
Log4j-CVE-2021-44228
Log4j-CVE-2021-44228 Log4j Remote Code Injection Apache Log4j 2.x 2.15.0-rc2...
CVE-2012-1823---PHP-CGI---RCE
CVE-2012-1823 | PHP-CGI Remote Code Execution RCE Exploit A Python-based exploit for CVE-2012-1823. This vulnerability allows an attacker to execute arbitrary code on a server running a vulnerable version of PHP-CGI by injecting command-line arguments via the query string. π Vulnerability Overvie...
poc-CVE-2026-23489
POC CVE-2026-23489 Proof of concept for CVE-2026-23489 GLPI "Fields" plugin --cookie-value COOKIEVALUE GLPI session cookie value --php PHP Raw PHP to execute on the server end statements with ';', Dropdowns...
Telerik-UI-ASP.NET-AJAX-Exploitation
Telerik-UI-ASP.NET-AJAX-Exploitation Unrestricted File Upload by Weak Encryption affected versions CVE-2017-11317 2. Remote Code Execution by Insecure Deserialization - CVE-2019-18935...
CVE-2019-16113-Bludit-3.9.2-RCE
CVE-2019-16113 Bludit 3.9.2 Remote Command Execution RCE...
CVE-2024-32002-git-rce
CVE-2024-32002-git-rce...
CVE-2019-17564
CVE-2019-17564 CVE-2019-17564 : Apache Dubbo Deserialization Remote Code Execution...
CVE-2025-58434
CVE-2025-58434 - Flowise unauthenticated account takeover, chained to CustomMCP RCE Two Flowise 3.0.5 issues, chained: 1. CVE-2025-58434 - password-reset token disclosure. POST /api/v1/account/forgot-password returns the target user's tempToken directly in the JSON response. Feed it to POST...
CVE-2024-49379
Proof of Concept PoC for CVE-2024-49379 This repository contains a Python-based Proof of Concept PoC for a critical vulnerability identified in UmbrelOS. The vulnerability allows for Cross-Site Scripting XSS, which can escalate to Remote Code Execution RCE under specific conditions. Overview CVE ...
cve-2025-12735-expr-eval-rce
CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. β οΈ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...