tpadmin-CVE-2026-2113-poc

tpadmin-CVE-2026-2113-poc A proof-of-concept exploiting a Remote Code Execution with web server privileges via Arbitrary File Upload. Vulnerability Description A critical Remote Code Execution vulnerability exists in H-ui.admin system's WebUploader preview component. The...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2021-44228

Log4Shell Proof-Of-Concept This repository is a Proof-Of-Concept for CVE-2021-44228 vulnerability. It is derived from This Repo. In this repository I have made an example of a vulnerable application and a demonstration of how to exploit it. Proof-of-concept Components I have modified the upstream...

roundcube-cve-2025-49113-lab

"DISCLAIMER: Educational Use Only" Roundcube Webmail RCE – CVE-2025-49113 Lab This repository documents my step-by-step exploitation of Roundcube Webmail CVE-2025-49113 in a controlled lab to obtain the secret stored in /secret.txt. ⚠️ Disclaimer All work was performed against a lab / training...

eos

Enemies Of Symfony EOS EOS loots information from a Symfony target in debug mode: Section| Description ---|--- General| Get general information about the target. Phpinfo| Extract Symfony environment variables from the exposed phpinfo. Routes| Get the list of registered routes. Request logs| Look...

CVE-2019-9193-Home-Lab

ENGLISH BELOW CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Lab นี้จำลองช่องโหว่ CVE-2019-9193 ที่เกิดใน PostgreSQL เวอร์ชัน 9.3 - 11.2 ซึ่งเปิดให้ user ที่เป็น superuser หรือมี role pgexecuteserverprogram สามารถใช้คำสั่ง: COPY ... FROM PROGRAM '' เพื่อรันคำสั่ง OS ได้โดยตรง ส่งผลให้เกิด Remot...

Antibody

Antibody Every AI-written code change must survive an attack by a second AI — with proof — before it is allowed to reach production. Antibody is a GitLab Duo pipeline for the "Life After Code" Transcend Hackathon. It treats a codebase like an immune system: when one AI fixes a vulnerability, a...

CVE-2014-8731-PoC

CVE-2014-8731-PoC - PHPMemcachedAdmin Remote Code Execution I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2014-8731-PoC...

CVE-2020-8163

CVE-2020-8163 Enviroment and exploit to CVE-2020-8163 Blind remote code execution of user-provided local names in Rails 5.0.1 and 4.2.11.2 Create the enviroment 1. create docker container mapping port 4000 to 8001 sudo docker run --rm -it -p 8001:4000 ruby:2.3 bash 2. update and install some tool...

vulnerability_struts-2.3.31

vulnerabilitystruts-2.3.31 Build the struts-2.3.31 CVE-2017-5638 environment. https request is possible. environment Ubuntu 20.04 Docker 20.10.12 curl 7.68.0 Server Startup We will use the tomcat:7.0-jre8 docker image. Unzip struts-2.3.31.zip in a directory of your choice. cd struts-2.3.31 sudo...

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco An issue was discovered in Hyland Alfresco Community Edition =7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage...

textpattern-exploit-rce

Textpattern = 4.8.3 Remote Code Execution Authenticated Textpattern until version 4.8.3 allows authenticated users to upload any PHP file. This script automates the process and allows to delete the uploaded file. Usage python3 exploit.py -t TARGET -u USER -p PASSWORD -c COMMAND -f FILENAME -d -t:...

CSRF-to-RCE-on-Backdrop-CMS

CSRF to RCE on Backdrop CMS 1.20 This PoC describe how to exploit CSRF on Backdrop CMS Version 1.20 with escalation to RCE. CVE ID CVE-2021-45268 Description The Backdrop CMS version 1.20 allows plugins to be added via ZIP files uploaded to the site. And because it does not have anti-CSRF...

solr_rce

Apache Solr RCE via Velocity template python usage: python solrrce.py http://x.x.x.x:8983 command getshell encode payload http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Introduction to Solr Solr is an open-source enterprise search platform...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 is a critical remote code execution vulnerability in Microsoft Outlook versions including Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 before February 2024 patch. It allows an unauthenticated attacker to bypass Outlook’s Protected View by sending a specially crafted emai...

CVE-2019-16663

CVE-2019-16663 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-16662...

CVE-2021-31805-POC

CVE-2021-31805-POC Vulnerability Information Apache Struts is a free, open-source MVC framework for creating elegant, modern Java web applications. It favors convention over configuration, can be extended using a plugin architecture, and ships with plugins that support REST, AJAX, and JSON...

CVE-2020-11978

CVE-2020-11978: Remote code execution in Apache Airflow's Example DAGs Information Description: This vulnerability allows RCE when Airflow's example DAGs are loaded, potentially unauthenticated with CVE-2020-13927 CVE Credit : xuxiang of DtDream security Versions Affected: On CVE-2020-13927 If...

Dolibarr-17.0.0-Exploit-CVE-2023-30253

Readme.md CVE-2023-30253 CVE-2023-30253 is a security flaw in Dolibarr software that enables authenticated users to execute remote code by utilizing an uppercase manipulation technique in injected data. Impact This vulnerability can lead to unauthorized remote code execution by malicious actors,...

acceleratortroll

AcceleratorTroll™ Abusing CVE-2023-28206 to make something useful. Roadmap Right now, we are still trying to understand how the vulnerability works and how to exploit it for anything other than panics. Prove that the vulnerability can be used to obtain kernel privileges. Obtain a krw exploit. Run...