1283753 matches found
CVE-2021-22941
Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...
ysoserial-cve-2018-2628
ysoserial-cve-2018-2628 0x1. Preparation Prepare the software environment required for POC script, Payload Object generation, and JRMPListener execution Python 2.7.x Oracle Java SE 1.7+ Prepare a WebLogic Server 10.3.6 environment with Patch Set Update 180417 installed AdminServer only is...
CVE-2019-3980
CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...
watchTowr-vs-WatchGuard-CVE-2025-9242
watchTowr-vs-WatchGuard-CVE-2025-9242 Detection Artifact Generator for WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f See our blog post for technical details Detection in Action python watchTowr-vs-WatchGuard-CVE-2025-9242.py --rhost...
CVE-2026-4631-cockpit-RCE
CVE-2026-4631 — Code Analysis Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Field| Detail ---|--- CVE ID| CVE-2026-4631 GHSA| GHSA-m4gv-x78h-3427 Severity| Critical CVSS 9.8 Affected versions| Cockpit 327 – 359 Fixed in| Cockpit 360 CWE| CWE-78: OS Command...
WhatsAppHACK-RCE
WhatsAppHACK-RCE...
firstexecution
firstexecution Collection of different ways to execute code outside of the expected entry points...
CVE-2022-26134
CVE-2022-26134 Confluence Pre-Auth Object-Graph Navigation Language OGNL Injection Confluence is a web-based workspace collaboration product that is developed by Atlassian. It can be deployed on-prem or as part of Atlassian Cloud. It consists of 3 key features: page, space and page tree. Page: Yo...
CVE-2026-24061-POC
CVE-2026-24061 - telnetd Authentication Bypass PoC Critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards About This PoC demonstrates CVE-2026-24061 , a critical authentication bypass vulnerability in...
CVE-2026-116153
ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes...
CVE-2026-116140
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who gets ImageMagick to process input that triggers a delegate invocation can bypass the administrator-defined policy and...
s2-048
s2-048 Exp for s2-048, CVE-2017-9791. / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc:...
CVE-2022-30292
CVE-2022-30292 Description This vulnerability is the heap-based buffer overflow in the function threadcall in Squirrel 3.2 and below. It caused by the lack of the call of sqreservestack function. This vulnerability leads to DoS of the client and could possibly lead to sandbox escape and arbitrary...
CVE-2021-43857
CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8. CVE-2021-43857 is a vulnerability marked as Critical priority CVSS 9.8 leading to remote code execution. This vulnerability works on all versions prior to 0.9.8. Tested onl...
darkmysqli
This repository does not have a README...
CVE-2022-29464
CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...
CVE-2025-26892
CVE-2025-26892 – WordPress Celestial Aura Theme = 2.2 Arbitrary File Upload Authenticated 📄 Description An Unrestricted File Upload vulnerability exists in the WordPress Celestial Aura theme developed by dkszone up to version 2.2. A low-privileged authenticated user can upload arbitrary PHP files...
phuip-fpizdam
PHuiP-FPizdaM What's this This is an exploit for a bug in php-fpm CVE-2019-11043. In certain nginx + php-fpm configurations, the bug is possible to trigger from the outside. This means that a web user may get code execution if you have vulnerable config see below. Writeup While we were too lazy t...
Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat
Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...