CVE-2024-25153

Exploit for CVE-2024-25153 Table of Contents Click to expand 1. Introduction 2. Installation 3. Usage 4. Contributing 5. License Introduction Welcome to the Exploit for CVE-2024-25153! This project is a solution to exploit the CVE-2024-25153 vulnerability and execute code remotely in Fortra...

CVE-2025-32682

🐚 CVE-2025-32682 - Arbitrary File Upload in MapSVG Lite = 8.5.34 📌 Plugin Details Name: MapSVG Lite Affected Version: = 8.5.34 Vulnerability Type: Arbitrary File Upload CVE ID: CVE-2025-32682 Published Date: 15 April, 2025 CVSS Score: 9.9 Critical 💥 Vulnerability Summary The MapSVG Lite plugin fo...

CVE-2023-22515

CVE-2023-22515 Key Information about CVE-2023-22515 Affected Product: Atlassian Confluence Data Center & Confluence Server. Disclosure Date: 04/10/2023. Severity: Critical CVSS 10.0. Vulnerability Type: Broken Access Control / Improper Authorization → allows an attacker to remotely create an admi...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...

pickle_exploit

PickleExploit Demonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML 🖥️ This script was developed by h3x0v3rl0rd. This proof of concept PoC demonstrates a potential security vulnerability involving the serialization and deserialization of Python objects using the...

CVE-2022-46169

CVE-2022-46169 This repository contains a Proof of Concept PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti = 1.2.22 by chaining an Authentication Bypass and a Command Injection, described by Sonar in this blog post. The same vulnerabilities were also discovered by: Steven Seeley mrme of...

CVE-2026-116130 HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request

HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...

EUVD-2026-113904

HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...

CVE-2026-116130 HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request

HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...

CVE-2024-22274-RCE

CVE-2024-22274 Exploit This repository contains an exploit for CVE-2024-22274. The exploit creates a new user on a remote machine via SSH and then provides a root shell. Requirements Go Golang installed on your machine. You can download it from here. A remote machine with SSH access. Compilation ...

CVE-2026-116587

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. Prior to 4.1.6, go-jose parses attacker-controlled RSA modulus and prime values from...

GitStackRCE

GitStackRCE GitStackRCE Vulnerability CVE-2018-5955 Exploit...

CVE-2023-23397

CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook CVE-2023-23397 is a remote code execution vulnerability in Microsoft Outlook, a popular email client used by millions of users worldwide. This vulnerability was discovered by security researcher Leandro Costa and reported to...

yaml-payload-2

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

Malicious code in log-utils-sdk (PyPI)

Source: kam193 9e04ec7e9e18068a3876db982defaaa4710d22d8bf619e65f6976b8cf7ddd3e9 Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in background periodically connects to a remote host and waits for...

CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis

This repository does not have a README...

hook

hook submodule for gitrce: https://github.com/EQSTSeminar/gitrce Attack Scenario kali192.168.216.129 --Give remote repository address-- Win192.168.216.130 kali192.168.216.129 --Git clone && hook scriptpost-checkout execution-- Win192.168.216.130 Disclaimer This repository is not intended to be gi...

CVE-2017-12611_Exploit

CVE-2017-12611 Project Overview: A RCE attack is possible with the given payload. Environment & Tools The following lists the environments and tools for testing and validation in an isolated, personal lab. Host OS : Ubuntu 18.04.6 Attacker OS : Kali Linux Container Platform : Docker Target...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - Remote Code Execution RCE Authenticated Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm: https://wordpress.org/plugins/wp-all-import/advance...

CVE-2025-31161

CVE-2025-31161 CrushFTP Authentication Bypass Scanner A Python tool to detect and test for CVE-2025-31161 vulnerability in CrushFTP servers. 📖 Description This script tests for the authentication bypass vulnerability CVE-2025-31161 in CrushFTP servers that allows remote attackers to authenticate...