1128245 matches found
Dolibarr-17.0.0-Exploit-CVE-2023-30253
Readme.md CVE-2023-30253 CVE-2023-30253 is a security flaw in Dolibarr software that enables authenticated users to execute remote code by utilizing an uppercase manipulation technique in injected data. Impact This vulnerability can lead to unauthorized remote code execution by malicious actors,...
cve-2022-39197
cve-2022-39197 Currently only remote images can be loaded...
CVE-2025-6058
🚨 CVE-2025-6058 — WordPress WPBookit ≤ 1.0.4 Unauthenticated File Upload Exploit Unauthenticated Arbitrary File Upload Exploit targeting WordPress WPBookit Plugin ≤ 1.0.4 Exploit allows remote shell upload and full command execution. Author: 0xgh057r3c0n 📌 About The Vulnerability CVE-2025-6058 is...
CVE-2019-11043
CVE-2019-11043 Python exp for CVE-2019-11043 You can use build environment from https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 Usage： python3 main.py -u http://iptopage/index.php If you success, you will see: Base status code is 200 qsl:1760 with status code 502 The target maybe...
Next.js-RCE-Scanner-BurpSuite-Extension-
CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...
napper-for-tpm
,----------------, ,---------, ,-----------------------, ," ,"| ," Napper v1.3 for TPM ," | ," ," | +-----------------------+ | ," ," | | .-----------------Z | | +---------+ | | | Z | | | | -==----'| | | | ︶ ︶ z | | | | | | | | - | | |/----| ==== oo | | | | | | | ,/| | ," | -----------------' |,"...
CVE-2022-22965_PoC
Spring Framework RCE exploitation Quick pentest notes Step 1: Find some endpoint in your target where is accepted POST/PUT methods + encode your payload URL encode POST /path/upload HTTP/1.1 Host: Origin: Cookie: JSESSIONID=BE65B534335A5A2538624404C063B70C; Content-Type:...
NETworkManager
NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...
irule-cve-2022-22965
irule-cve-2022-22965 This is a basic iRule to provide some mitigation against CVE-2022-22965 a.k.a. Spring4Shell. Tested on BIG-IP 15.x. Overview On March 30, 2022, a remote code execution RCE vulnerability was found in the Java Spring Framework, identified by the CVE 2022-22965. I am sharing an...
CVE-2025-55182
CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...
CVE-2020-28018
CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...
spring4shell-poc
Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...
spring4shell-poc
Spring4Shell POC 漏洞描述：https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html POC 构建：https://github.com/BobTheShoplifter/Spring4Shell-POC 构建/运行步骤 已在 JDK 11.0.14、Spring Boot 2.6.5 和 Apache Tomcat 9.0.60 上测试通过 运行 mvn clean package 构建应用程序 将 demo-0.0.1-SNAPSHOT.war 重命名为...
CVE-2018-18778-Scanner
CVE-2018-18778-Scanner Scan vulnerable versions of minihttpd before 1.30. ACME minihttpd before 1.30 lets remote users read arbitrary files. Usage python3 CVE-2018-18778-Scanner.py...
MiniExploit
MiniExploit WebMin Versions...
weevely3
Weevely - Shell web armamentizado Descripción Weevely es un shell web diseñado para fines de post-explotación que puede extenderse a través de la red en tiempo de ejecución. Suba el agente PHP de weevely a un servidor web objetivo para obtener acceso remoto a un shell en él. Tiene más de 30 módul...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
CVE-2025-32433
CVE-2025-32433 Introduction This document presents a study of the vulnerability CVE-2025-32433 , affecting the built-in SSH server implementation in the Erlang/OTP platform. This vulnerability is a Remote Code Execution RCE opportunity without authentication and affects several Erlang/OTP branche...
openssh-portable
Portable OpenSSH OpenSSH is a complete implementation of the SSH protocol version 2 for secure remote login, command execution and file transfer. It includes a client ssh and server sshd, file transfer utilities scp and sftp as well as tools for key generation ssh-keygen, run-time key storage...