Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 Vulnerability Description In the early days, hackers exploited the WLS component vulnerability of WebLogic to launch large-scale remote attacks against enterprise servers. A large number of enterprise servers were compromised, an...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

Automation-for-Juniper-cve-2023-36845

Automation for Juniper CVE:2023-36845 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of IP addresses, sends a request to each, and determines whether the system is vulnerable based on the response. Usage To use the script, run it fro...

grafanaExp

grafanaExp A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability CVE-2021-43798, it can burst plugins / extract secretkey / decode datasource info automatic. Usage Automatic exploit with exp and local decode dbfile with decode. ➜ ./grafanaExp -h NAME: grafanaExp - Exploit...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB Deserialization PoC Proof-of-Concept for a deserialization vulnerability in pdfminer.six that leads to arbitrary code execution when parsing a crafted PDF. PURPOSE / LEGAL DISCLAIMER This repository is provided for educational and authorized security research...

CVE-2023-20273

CVE-2023-20273 CVE-2023-20273 Exploit PoC Usage usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h, --help show this...

React2Shell-Library

React2Shell Library A curated list of resources regarding CVE-2025-55182 , the critical Remote Code Execution RCE vulnerability in React Server Components known as "React2Shell". Objective: To document the history, mechanics, and remediation of the React2Shell vulnerability for researchers and...

CVE-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

frida-medit

frida-medit cross-platform cui-based process memory analyzer. Memory Scanner ? Please Input a command. find ? Please Input a data type. 'dword' ? Please Input a value. 1000 progress: 100%|█████████████████████████████████████████████████████████████████████████████████████████████| HIT COUNT:3834...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 This is a Python3 program that exploits GitLab authenticated RCE vulnerability known as CVE-2022-2884. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not take responsibility for the...

vsftpd-234-vuln-report

💥 vsftpd 2.3.4 Backdoor Exploit Report Exploitation of a known vulnerability in vsftpd 2.3.4 using Metasploit. 📌 Target Details Target IP: 192.168.150.133 Service: FTP Vulnerable Version: vsftpd 2.3.4 Exploit Module: exploit/unix/ftp/vsftpd234backdoor Payload: Command shell TCP 🔍 Vulnerability...

CVE-2020-1472

CVE-2020-1472 arp-scan Rangip nmap -A -vv -Pn IPADDR python3 setemptypw.py DCNETBIOSNAME DCIPADDR python3 secretsdump.py -no-pass -just-dc DOMAIN/DCNETBIOSNAME$@DCIPADDR python3 wmiexec.py -hashes HassPasswdUser DOMAIN/User@dcipaddr windows command whoami systeminfo hostname md testdir echo test...

CVE-2026-74469

CVE-2026-7469 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2026-81000

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2024-32019-POC

Privilege Escalation via ndsudo Netdata Local Exploit This POC is used to exploit a vulnerable ndsudo utility bundled with Netdata to escalate local privileges to root. The exploit works by injecting a malicious binary into the user’s PATH that impersonates a trusted command nvme and is executed...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Python 3 checker and configurable exploit hook for CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Product| REDCap Vanderbilt Affected| ≥ 13.3.0 until branch patch Fixed| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical...

watchTowr-vs-FortiSIEM-CVE-2025-25256

watchTowr-vs-FortiSIEM-CVE-2025-25256 Detection Artifact Generator for FortiSIEM CVE-2025-25256 https://github.com/user-attachments/assets/1aa1040a-af34-460d-8844-1e440efa9ba1 See our blog post for technical details Detection in Action python watchTowr-vs-FortiSIEM-CVE-2025-25256.py -r...

CVE-2021-3156

CVE-2021-3156 Ansible role patches CVE-2021-3156 for CentOS Intro Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character CVE-2021-3156 News RU RUN ansible-playbook...

ldapsdk

UnboundID LDAP SDK for Java Download the Latest Release of the LDAP SDK Here The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free and open source Java library for communicating with LDAP directory servers. It offers better performance, better ease of use, and mo...

shisoserial

shisoserial What is this A simple tool targeted at shiro framework attacks with ysoserial. Contributor 4nth0ny @Fridaylab Runtime python 3.x JDK 1.8 Installation python3 -m pip install -r requirements.txt for AttributeError: module 'Crypto.Cipher.AES' has no attribute 'MODEGCM' or No module named...