CVE-2023-27350

CVE-2023-27350 Exploit POC This is a Proof of Concept POC exploit for CVE-2023-27350, a vulnerability found in PaperCut MF/NG that allows an unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Requirements Before using this exploit, make sure you have installed the followin...

zoneminder-snapshots-rce-poc

Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GL.iNet Beryl AX Triple RCE PoC PoC for three unauthenticated command injection vulnerabilities CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 in the GL.iNet GL-MT3000 Beryl AX travel router firmware = 4.4.5. Full writeup:...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Nuclei Template CVE-2022-1388 BIG-IP iControl REST Exposed May 06, 2022 This only verifies the presence of the API by hitting the authentication endpoint This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP...

CVE-2021-25094-tatsu-preauth-rce

Preauth RCE in Tatsu builder Wordpress plugin CVE-2021-25094 Simple PoC of an unauthenticated RCE in Tatsu Builder = 3.3.11 provided as an example. Full write-up here: https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ Usage: python3 exploit-rce.py -h --technique TECHNIQUE...

CVE-2025-32433-PoC

CVE-2025-32433: Erlang/OTP SSH Unauthenticated RCE PoC This repository contains a Proof-of-Concept PoC for CVE-2025-32433, a critical unauthenticated Remote Code Execution RCE vulnerability affecting the SSH server implementation in Erlang/Open Telecom Platform OTP. This PoC is designed for...

ForgottenButNotGone

Forgotten but Not Gone This repository contains proof-of-concept scripts for the vulnerabilities presented at the talk "Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services" from Black Hat USA 2026 and DEF CON 34. CVE-2026-28372 Local privilege escalation in TelnetD:...

CVE-2021-25003

CVE-2021-25003 Title: WPCargo 6.9.0 - Unauthenticated RCE Author: Krzysztof Zając https://kazet.cc/ CVE: CVE-2021-25003 Installation git clone https://github.com/biulove0x/CVE-2021-25003.git cd CVE-2021-25003/ python3 -m pip install -r requirements.txt How to run autoexploit $ python3 WpCargo.py...

CVE-2020-14882-weblogicRCE

Detection of RCE in Oracle's "WebLogic Server" CVE-2020-14882 / CVE-2020-14750 Summary: Detection of attempts to exploit CVE-2020-14882 and CVE-2020-14750 - Unauthenticated RCE in Oracle's Weblogic Server. References: Oracle's advisories: CVE-2020-14882...

nmap-CVE-2022-29464

nmap-CVE-2022-29464 nmap-CVE-2022-29464 is an NSE script for detecting CVE-2022-29464 vulnerability. Unauthorized and unrestricted arbitrary file transfer vulnerability that allows unauthenticated attackers to obtain RCEs on WSO2 servers by sending malicious JSP files. Vulnerability See good...

Ultimate-wp2shell

WP2Shell – Proof of Concept Educational and defensive Proof of Concept PoC for validating exposure to the WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 WP2Shell. Overview This repository provides a defensive detection and validation proof of concept for the WordPress Core...

react2shell-lab

React2Shell - CVE-2025-55182 Lab A comprehensive laboratory for demonstrating and testing the critical vulnerability CVE-2025-55182 in React Server Components. ⚠️ Educational Purpose Only This repository is intended for: Security research and education Understanding vulnerability mechanisms Testin...

CVE-2025-20281-2-Cisco-ISE-RCE

CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for CVE-2025-20281 RCE against Cisco ISE API CVE-2025-20281 Unauthenticated PoC A minimal Python proof-of-concept that exploits the unauthenticated RCE in Cisco ISE’s ERS API CVE-2025-20281 by injecting arbitrary shell commands into the...

CVE-2025-53770

CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Automatic Mass Tool for checking vulnerability in CVE-2022-4060 - WordPress Plugin : User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use bash upger.sh yourlist.txt thread...

CVE-2022-46169

CVE-2022-46169 This repository contains a Proof of Concept PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti = 1.2.22. You can read more about the vulnerability here. The script adds a reverse shell handler and is based on the code written by sAsPeCt488. You can view the original code here...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your password has expired, and a new one must be chosen.uid=0root gid=0root groups=0root Failed to change password : The current password is incorrectuid=0root gid=0root groups...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Unauthenticated RCE / |\ \ / /| | | / | | | | || | / | || / | | \ V / | || / / | |/ / | | | | , /| || \ / / | / || /| //||/ || // ||/ /| Exploit for Pterodactyl Panel ≤ 1.11.10 - unauthenticated LFI to RCE. The Vulnerability The /locales/locale.json...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

CVE-2025-34152

⚠️ CVE-2025-34152 – Shenzhen Aitemi M300 Wi-Fi Repeater RCE 🚨 Overview Shenzhen Aitemi M300 Wi-Fi Repeater is affected by an unauthenticated remote code execution RCE. No login required Does not reboot the device Can be exploited remotely 🛠 Vulnerable Versions Version| Status ---|--- 1.0.x| ❌...