CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024...

react-cve-2025-55182-lab

Setup: git clone https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab cd react-cve-2025-55182-lab sudo docker build -t react-rsc-lab . sudo docker run -p 3000:3000 react-rsc-lab Exploit: curl --path-as-is -i -s -k -X $'POST' \ -H $'Host: localhost:3000' -H $'User-Agent:...

CVE-2021-29505

Reproduction Process In IDEA, import the xstream component's jar package. This reproduction uses the CommonsCollections6 chain for exploitation, so import the commons-collections component jar package. POC is detailed in the attachment. First, use ysoserial to start a malicious RMI server for...

watchTowr-vs-FortiWeb-CVE-2025-25257

watchTowr-vs-FortiWeb-CVE-2025-25257 Detection Artifact Generator for FortiWeb CVE-2025-25257 See our blog post for technical details https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Detection in Action python watchTowr-vs-FortiWeb-CVE-2025-25257.py --target...

CVE-2024-31114

CVE-2024-31114 - WordPress Shortcode Addons RCE Exploit Shortcode Addons = 3.2.5 – Authenticated Admin+ Arbitrary File Upload CVE ID: CVE-2024-31114 CVSS Score: 9.1 Critical 🛠️ Vulnerability Description The Shortcode Addons – with Visual Composer, Divi, Beaver Builder, and Elementor Extension...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

CVE-2024-37054-MLflow-RCE

| / || | | || | / \ \ / / | |/| || | | | | | | | | |\ \ /\ / / | | | || | | | | || || | \ V V / || |||||| ||/ // | \ / || | | \ / | | | || | | | | | |/ \ | | | | | | | | /| || | || \ ||| || / | CVE-2024-37054: MLflow Remote Code Execution PoC This repository contains a Proof of Concept...

CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

CVE-2025-24016

Wazuh Remote Code Execution RCE - PoC Vulnerability Overview This repository demonstrates the remote code execution RCE vulnerability in the Wazuh server, introduced by an unsafe deserialization in the wazuh-manager package. The vulnerability allows remote attackers with API access compromised...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 Woori FISA Technical Seminar 6th - Team 3: Analysis and research on React2Shell, a remote code execution RCE vulnerability exploiting design flaws in React Server Component RSC Team Member| Role| GitHub ---|---|--- 남인서| Research, PPT production, Presentation| @sene03 유승...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965 is a high-severity vulnerability in the V8 JavaScript engine of the Google Chrome browser. The vulnerability stems from improper implementation in the V8 engine when handling specific JavaScript code, leading to heap memory corruption. An attacker could exploit thi...

CVE-2022-40634

CVE-2022-40634: FreeMarker Server-Side Template Injection in CrafterCMS By inserting malicious content in a FTL template, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote Code Execution...

cve-2026-4257

CVE-2026-4257 This exploits CVE-2026-4257, a Server-Side Template Injection SSTI vulnerability in the "Contact Form" Wordpress plugin by Supsystic in versions 1.7.36 and before. This vulnerability allows an unauthenticated attacker to achieve Remote Code Execution. The vulnerability exists in the...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2022-22733

CVE-2022-22733 CVE-2022-22733 is a vulnerabilit that affects Apache ShardingSphere ElasticJob-UI 3.0.0 and below versions, The vulnerability lead to Privilege Escalation. But, with abusing of the escalated privileges a JDBC Attack it can preformed & achieve RCE. You can read the vulnerability...

Blackash-CVE-2025-68613

🚨 CVE-2025-68613 — Critical RCE in n8n Severity: 🔴 Critical Impact: Remote Code Execution Affected Platform: n8n workflow automation 🧩 Overview CVE-2025-68613 is a critical security vulnerability in n8n , an open-source workflow automation platform. The issue allows an authenticated attacker to...

Watchguard-RCE-POC-CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 Watchguard RCE POC CVE-2022-26318 The CVE for this issue is CVE-2022-26318...

CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename. POST...

CVE-2019-9978

CVE-2019-9978 – Proof of Concept PoC Functional PoC for vulnerability CVE-2019-9978 , affecting the plugin Social Warfare = 3.5.2, allowing Remote Code Execution RCE in WordPress. 📌 Description This exploit abuses the swpdebug=loadoptions parameter to force the loading of a remote payload, allowi...

CVE-2026-40859

camel-netty-http / camel-vertx-http HTTP-Response Unsafe Deserialization Reproducer CVE-2026-40859 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-netty-http and camel-vertx-http components, tracked as CVE-2026-40859. When a producer endpoint is configured...