CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...

CVE-2021-41773

RCE exploit both for Apache 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013: IMHO only "special" setups will be vulnerable to this RCE. Same happens for the "arbitrary file read" exploits you have seen. Both CVEs are indeed almost the same path-traversal vulnerability 2nd one is the uncomplete fi...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download git clone...

MassExploit-CVE-2025-55182

CVE-2025-55182 – Massive Scanner PoC CVE-2025-55182 also referred to as “React2Shell” is a critical Remote Code Execution RCE vulnerability in the React Server Components RSC system. The issue occurs because the HTTP payload deserialization mechanism for “Server Functions” processes untrusted inp...

CVE-2025-47812-poC

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE-2025-47812 to run commands and get a reverse shell. For educational use only. Vulnerability Details This security vulnerability was publicly disclosed and detailed by RCESecurity...

cve-2025-11953-vulnerability-demo

React Native CLI Command Injection Demo CVE-2025-11953 ⚠️ VULNERABILITY DEMONSTRATION ⚠️ JFSA-2025-001495618 - Critical Command Injection in React Native CLI CVE : CVE-2025-11953 CVSS Score : 9.8 Critical Affected Package : @react-native-community/cli-server-api Vulnerable Versions : 4.8.0, 20.0.0...

CVE-2020-8209

Usage and Disclaimer This script is a batch detection script for the Citrix XenMobile directory traversal vulnerability CVE-2020-8209. Usage: Python CVE-2020-8209-Multiple.py url.txt The vulnerable addresses are output in vul.txt Affected Versions: Citrix XenMobile Server 10.12 before RP2 Citrix...

CVE-2018-8414-POC

CVE-2018-8414 POC Windows Shell Package Setting Remote Code Execution Vulnerability Since : Windows 10 Version 1703 to 1803 / Windows Server Version 1709 to 1803 Note : Some time the exploit fail depending of the file location default policy settings, so for that just copy the file in the Package...

CVE-2021-41773

CVE-2021-41773 Reproduction https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited v2.4.49 Apache unique vulnerability, earlier versions do not have the apnormalizepath function. This function was introduced in v2.4.49, and it is exactly this function...

CVE-2026-93693

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated attacker to issue server-side requests t...

CVE-2026-108836

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2024-51747

CVE-2024-51747 Log in with an administrator account and download the database in the system settings Modify projecthasfiles in the sqlite.db database Compress the modified sqlite.db with gzip and upload it. After uploading it to the project and clicking the file to view/download, the attacker can...

rmcp: RMCP: Denial of Service via unauthenticated session table leak

A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. An unauthenticated remote attacker can send specially crafted JSON-RPC POST requests to the stateful Streamable HTTP server. These requests cause the server to create and permanently retain session and channel state without prop...

rmcp: RMCP: Denial of Service via unauthenticated session table leak

A flaw was found in rmcp, a Rust SDK for the Model Context Protocol. An unauthenticated remote attacker can send specially crafted JSON-RPC POST requests to the stateful Streamable HTTP server. These requests cause the server to create and permanently retain session and channel state without prop...

PlEXcalaison

Local Privilege PlEXcalasion - CVE-2021-42835 Plex Media Server for Windows prior to version 1.25.0.5282, vulnerable to Time Of Check Time Of Use TOCTOU that allows low privilege users to gain SYSTEM privileges. Discovered by Tomer Peled, Netanel Cohen, and Amir Shen a Security Researchers from...

CVE-2025-66478-Exploit-PoC

CVE-2025-66478 Exploit PoC This repository contains proof-of-concept PoC code for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It includes a vulnerable Next.js application and a Node.js exploit script for testing the vulnerability. English · 中文 What is CVE-2025-66478? Thi...

CVE-2021-21972

Usage & Disclaimer VMware vCenter Server Remote Code Execution Vulnerability CVE-2021-21972 Usage: Python CVE-2021-21972.py urls.txt Each URL in urls.txt is on a single line, vulnerable addresses are output to vul.txt Affected Versions: VMware vCenter Server 7.0 series 7.0.U1c VMware vCenter Serv...

CVE-2021-40438

CVE-2021-40438 exploit PoC with Docker setup CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-40438:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 Note: You can also use Image ID...

CVE-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...