1283496 matches found
CertVerify
CertVerify The CertVerify is a tool designed to detect executable files exe, dll, sys that have been signed with untrusted or leaked code signing certificates. The purpose of this tool is to identify potentially malicious files that have been signed using certificates that have been compromised,...
CVE-2019-0708-Tool
CVE-2019-0708-Tool Sharing the tool after 50 Stars... Contact...
PoC-CVE-2026-23744
PoC-CVE-2026-23744 Remote Code Execution on MCPJam Inspector Reference https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...
claude-poc
There are multiple ways to abuse Claude code, this is one of them which I found during my research & reported November 23, 2025 not-fixed, might come handy while doing RT/PT for inital access. Summary: The apiKeyHelper is a custom shell script /bin/sh designed to generate authentication values fo...
oracle-weblogic-CVE-2021-2109
oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...
Claude-BugHunter
claude-bughunter A self-contained Claude skill bundle for bug hunting and external red-team work Β· 83 skills Β· 15 slash commands Β· 681 disclosed-report patterns 433 now individually cited & auditable across 24 core vulnerability classes Β· enterprise identity + infrastructure attack matrices Β·...
CVE-2023-33246
CVE-2023-33246 Modify props.setProperty, execute command...
react2shell
React2Shell - CVE-2025-55182 Exploit PoC A proof-of-concept exploit for CVE-2025-55182, a critical Remote Code Execution vulnerability in Next.js applications using React Server Components. β οΈ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY. β DO NOT use against system...
CVE-2025-32432
π CVE-2025-32432 β Craft CMS Pre-Auth RCE Pre-Authentication Remote Code Execution in Craft CMS Discovered & Developed by Mohammed Idrees Banyamer π Overview CVE-2025-32432 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting multiple versions of Craft CMS. By chaini...
CVE-2016-2098
CVE-2016-2098 Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. Explanation: This issue comes from the usage of the render method on user-supplied data. The method render is usually used to render a page from a template, but render method also allows...
CVE-2025-7775-PoC
CVE-2025-7775 | NetScaler ADC RCE PoC β οΈ Disclaimer: This is a hypothetical PoC for educational purposes only.Segment NetScaler networks CVE-2025-7775 does not exist. Use only in an isolated lab. Overview Simulated exploit for a hypothetical unauthenticated RCE in Citrix NetScaler ADC/Gateway...
abap-code-scanner
OWASP ABAP Code Scanner Static Application Security Testing SAST for SAP ABAP. A free, open-source CLI for finding security vulnerabilities in custom ABAP code - offline and in CI. Editions Edition| What it is| Where ---|---|--- Open-source CLI free, MIT| Scan exported ABAP source locally or in C...
Project-CVE-2015-1635
CVE-2015-1635 CVE-2015-1635, MS15-034 Vulnerability Detection USAGE python MS15-034.py www.xxx.com:80 Test Program HTTP.sys Remote Code Execution Vulnerability CVE-2015-1635, MS15-034 A remote code execution vulnerability exists in the HTTP protocol stack HTTP.sys when HTTP.sys does not properly...
CVE-2022-26134
POC - Atlassian Confluence OGNL Injection Remote Code Execution RCE Vulnerability CVE-2022-26134 Tested on Confluence Version 7.13.6 Setting up environment Clone the repository docker-compose up -d On http://localhost:8090 you shall see confluence up and running. Next, get an evaluation license f...
CVE-2026-39842
CVE-2026-39842: OpenRemote Expression Injection RCE in Rules Engine TL;DR Critical remote code execution vulnerability in OpenRemote's Rules Engine allows authenticated users with write:rules role to execute arbitrary code on the server with root privileges. CVSS Score : 10.0 Critical CVSS Vector...
EvilRip
Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...
vSphereyeeter
vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...
CVE-2023-50564-pluck
CVE-2023-50564-pluck CVE-2023-50564 An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. This is an authenticated vulnerability. Disclaimer: This code is meant for...
CVE-2017-1000353
CVE-2017-1000353 POC How to reproduce the Jenkins CVE-2017-1000353οΌ Clone this repository, use the pre-built payload jenkinspoc.ser with flowing command: python exploit.py http://your-ip:8080 jenkinspoc.ser Then the touch /tmp/success would be executed. Java Version Requirements Important : The...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution RCE in Apache Tomcat. This vulnerability works on versions 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81. Tested only on 8.0.24. Vulnerability uses misconfigured PUT option on the...