CVE-2020-14882

CVE-2020-14882 This Python script is designed to exploit a Remote Code Execution vulnerability in Oracle WebLogic Server CVE-2020-14882 to execute commands on a vulnerable target server and capture their output through HTTP requests. It first prompts for a target WebLogic URL and network interfac...

CVE-2022-27925

CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...

Log4j-_Vulnerability

The Web Is Vulnerable to CVE-2021-44228 This web application is vulnerable to CVE-2021-44228, a critical security flaw in Apache Log4j 2 known as Log4Shell. This vulnerability allows unauthenticated attackers to remotely execute malicious code by sending specific input that is logged by the syste...

EH2-PoC

Cacti Unauthenticated Command Injection CVE-2022-46169 This is a simple PoC adaptation of the Vulnhub's Cacti scenario. You can check it out here Cacti is a robust and extensible operational monitoring and fault management framework for users around the world. A command injection vulnerability...

CVE-2024-4577-PHP-RCE

CVE 2024-4577 PHP Remote Code Execution automated scanner by Waived Affected versions: PHP 8.3, 8.3.8, 8.2. 8.2.20, 8.1., 8.1.29 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 https://www.exploit-db.com/exploits/52047 https://vulners.com/cve/CVE-2024-4577 Overview: This is a scanner that...

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2024-1651-PoC

CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...

CVE-2022-29465

CVE-2022-29464 go run main.go 请输入目标地址, 如 https://127.0.0.1 https://127.0.0.1:9443 https://127.0.0.1:9443/authenticationendpoint/cmd.jsp?cmd=id...

EUVD-2026-112264

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2026-118619 Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2026-118619

The Ultralytics platform contains a Path Traversal vulnerability (CWE-22) within its Google Drive download handling functionality. The root cause is a lack of proper validation for user-supplied paths prior to performing file operations. A remote attacker can leverage this flaw to achieve Remote ...

EUVD-2026-112263

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118618

The Ultralytics software is vulnerable to a Code Injection flaw within the parse_model function. This vulnerability arises from a lack of proper validation of a user-supplied string before it is used to execute Python code . A remote attacker can exploit this to execute arbitrary code in the cont...

CVE-2026-118617

The Ultralytics software is vulnerable to a Remote Code Execution (RCE) vulnerability in the load_dataset_cache_file function. The root cause is the lack of proper validation of user-supplied data , which leads to the deserialization of untrusted data (CWE-502). An attacker can leverage this flaw...

CVE-2026-118617 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

EUVD-2026-112262

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118616

The Ultralytics software contains a Code Injection Remote Code Execution vulnerability within the parse_model function. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code. A remote attacker can leverage this flaw to execute arbitrary...