MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...

CVE-2026-116512

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...

Exploit-CVE-2014-4210-

START WITH A COOL THING DUDEUSE IT TO F&CK UPGRADES TO CAUSE HUMAN SUFFERING: 1. Self-Replicating Worm : Spreads via SSH brute-force/SMB exploits to all connected networks. 2. MBR Overwrite : Brick physical hardware by destroying partition tables no recovery possible. 3. Zero-Day RCE : Exploits...

CVE-2024-4701-POC

CVE-2024-4701-POC POC for CVE-2024-4701 Download the genie docker file from https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml or this repo run docker-compose up Download the attached http payload loadlib Run the following command nc -w 5 localhost 8080 loadlib You may need to...

CVE-2025-53690

CVE-2025-53690 Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Code Injection.This issue affects Experience Manager XM: through 9.0; Experience Platform XP: through 9.0. How does this detection method work? This Nuclei...

CVE-2022-42889-RCE

CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote code execution exploit Text4Shell Vulnerability. Give a ⭐ for support ❤️ About this vulnerability CVE-2022-42889 is a new critical vulnerability similar to Spring4Shell and Log4Shell. Its a RCE Remote Code Execution vulnerability with...

CVE-2022-36234

Description of CVE-2022-36234 SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets. Triggering the double free will allow clients to crash any SimpleNetwork TCP server remotely. In...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 One-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

ghostcat

This tool exploits an LFI vulnerability within Apache Tomcat named CVE-2020-1938 to not only view sensitive files, but also to run malicious JSP payloads. It can be downloaded here you will need to run it from the command line Usage: ghostcat target HTTP port AJP port file read/eval...

inspec_cve_2019_15224

a malicious rest-client gem On August 19, 2019, it was discovered that the rest-client gem had had several versions published containing malicious code. In discovering the malicious rest-client, several other new gems were determined to be carrying similar code. Coverage:...

irule-cve-2022-22965

irule-cve-2022-22965 This is a basic iRule to provide some mitigation against CVE-2022-22965 a.k.a. Spring4Shell. Tested on BIG-IP 15.x. Overview On March 30, 2022, a remote code execution RCE vulnerability was found in the Java Spring Framework, identified by the CVE 2022-22965. I am sharing an...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS Server RCE FOFA "HttpFileServer" Notes Affected range: HFS 2.3 and below Usage How To Use ulimit -n 999999; zmap -p PORT -B500M | go...

CVE-2024-1655

CVE-2024-1655 Description ASUS ExpertWiFi EBM63, EBM68, and RT-AX57 Go firmwares before the 12-04-2024 patch contain a command injection vulnerability in splashpageSDN.cgi function. When an attacker sends a specially crafted request, they can achieve arbitrary code execution. references: Official...

PHPUnit_eval-stdin_RCE

PHPUniteval-stdinRCE CVE-2017-9841 PHPUniteval-stdinphp Remote Code Execution A code injection vulnerability in PHPUnit, a PHP unit testing framework which part of the Mailchimp , Mailchimp E-Commerce moduels in Drupal The vulnerability within the /phpunit/src/Util/PHP/eval-stdin.php file through...

exim-rce-quickfix

This repository does not have a README...

CVE-2026-38526-PoC-htb-nexus

CVE-2026-38526-PoC-htb-nexus A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x built for htb-nexus 🛠 Quick start and Usage 1. Clone the repository: git clone https://github.com/Resolvdd/CVE-2026-38526-PoC-htb-nexus.gi...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2021-41773

CVE-2021-41773 Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE...

CVE-2015-8660

CVE-2015-8660 This code contains the exploit code for CVE-2015-8660, along with comments, the source code with the vulnerability, and the patched code. For specific code explanations, please see my blog http://blog.csdn.net/enjoy5512/article/details/51155798...

exploit-CVE-2016-9920

Roundcube 1.0.0 = 1.2.2 Remote Code Execution Roundcube is a widely distributed open-source webmail software used by many organizations and companies around the globe. The mirror on SourceForge, for example, counts more than 260,000 downloads in the last 12 months which is only a small fraction o...