text4shell

text4shell A demonstration of CVE-2022-42889 text4shell remote code execution vulnerability. Details in Don't Panic!: CVE-2022-42889 Text4shell vulnerability in Apache Commons Text...

RCE-PoC-CVE-2021-25646

CVE-2021-25646 Proof-of-Concept Go Version Overview This repository contains a proof-of-concept PoC exploit for CVE-2021-25646, a critical remote code execution vulnerability in Apache Druid. The exploit is written in Go and allows for interactive command injection via the terminal. Features...

CVE-2024-4577

CVE-2024-4577 Vulnerability Checker This script is designed to check for the vulnerability described by CVE-2024-4577, which involves exploiting certain PHP configurations to execute arbitrary code remotely. It sends a POST request to specified endpoints on a list of domains and checks if the...

CVE-2024-11394

CVE-2024-11394 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious reformer trax...

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites Plugin = 1.0.7 - CSRF to Arbitrary Plugin Installation 📌 Overview CVE-2025-25101 is a Cross-Site Request Forgery CSRF vulnerability in the MetricThemes Munk Sites plugin for WordPress versions ≤ 1.0.7. This vulnerability allows an unauthenticated attacker t...

CVE-2021-40904

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...

Commvault-CVE-2025-34028

CVE-2025-34028 Commvault Remote Code Execution CVE-2025-34028 NSE How to run in Nmap: nmap -p443 --script CVE-2025-34028 --script-args='https-ports=443'...

cve-2011-2553

Notice: This repository contains educational material for testing in a controlled laboratory. Do not use the files or techniques described here against systems that are not your own or that do not have explicit authorization. The goal is learning and strengthening security. CVE-2011-2553 FTP...

CVE-2021-31762

..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021...

CVE-2020-5245

CVE-2020-5245 1. Run mvn clean install to build your application 2. Start application with java -jar target/dropwizard-1.0-SNAPSHOT.jar server config.yml 3. To check that your application is running enter url http://localhost:8080 some error in pom.xml plugins were not affected reproduce Reproduc...

CVE-2024-4577

This is POC of CVE 2024-4577 This exploit allows attacker to perform RCE in PHP Versions such as PHP 8.3 8.3.8 PHP 8.2 8.2.20 PHP 8.1 8.1.29 Arguments you can check from code! To read more about this particular exploit check nist.gov...

CVE-2022-22947

CVE-2022-22947 A code injection attack on spring cloud gateway Summary of the CVE In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+, applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make ...

CVE-2021-41773-Apache-2.4.49-

CVE-2021-41773-Apache-2.4.49- Penetration testing 1.1. Path Traversal Read /etc/passwd file !/bin/bash Script: exploitpathtraversal.sh Objective: Read /etc/passwd file from Apache 2.4.49 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ Exploiting...

Remote-Buffer-overflow-CVE-2003-0172

Remote-Buffer-overflow-CVE-2003-0172 ┌──cyberdesu㉿MSI- └─$ python3 buffer.py usage: exploit.py...

xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1

SQLite JDBC Driver SQLite JDBC is a library for accessing and creating SQLite database files in Java. Our SQLiteJDBC library requires no configuration since native libraries for major OSs, including Windows, macOS, Linux etc., are assembled into a single JAR Java Archive file. Usage ➡️ More usage...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2 Working exploit for Open Web Analytics 1.7.3 - RCE enhenced with pentestmonkey's php reverse shell, Fixed issue of not able to find user in cache. Original soruce exploit can be found on here Usage Add your attacker...

WIn-CVE-2021-31166

WIn-CVE-2021-31166 This Repo is inspired on 0vercl0k for a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. Build Infraestructure git clone...

Valve-Press-CVE-2024-27956-RCE

Valve-Press-CVE-2024-27956-RCE Valve Press - CVE-2024-27956-RCE - SQL Injection...

php_reverse_shell

This repository does not have a README...

POC-CVE-2012-1831

POC-CVE-2012-1831 Proof Of Concept for the CVE-2012-1831 Kingview Touchview 6.53 Background on Kingview KingView® is a powerful Windows-based industrial SCADA software for monitoring & controlling industrial processes. With over 25 years of development, it's now known for being the best selling...