CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC Exploit alt text ExploitDB Dompdf versions 1.2.1 are vulnerable to Remote Code Execution RCE by injecting CSS into the data. The file can be tricked into storing a malicious font with a .php file extension in its font cache, which can later be executed b...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

CVE-2025-58434-AND-59528-POC

Flowise Dual CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents Overview Vulnerability Details CVE-2025-58434 — Account Takeover...

cve-2026-87902-poc

CVE-2026-87902 — WordPress Core: path traversal no autenticado en la resolución de plantillas de página Inclusión local de archivos PHP no autenticada en WordPress Core mediante un valor pagename con doble codificación — y, bajo condiciones específicas de despliegue, ejecución de código PHP con l...

AVideo3xploit

AVideo3xploit.go RCE exploit for AVideo root@kali: go get github.com/fatih/color root@kali: git clone https://github.com/ahussam/AVideo3xploit.git root@kali: cd AVideo3xploit root@kali:/AVideo3xploit go run AVideo3xploit.go http://target/avideo/ username password You should get a connection on yo...

CVE-2022-22965-Spring4Shell

Spring4Shell Spring4Shell CVE-2022-22965 Proof Of Concept with a vulnerable Tomcat server with a vulnerable spring4shell application. Details about this vulnerability https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...

react2shell

React2Shell - CVE-2025-55182 Exploit PoC A proof-of-concept exploit for CVE-2025-55182, a critical Remote Code Execution vulnerability in Next.js applications using React Server Components. ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY. ❌ DO NOT use against system...

langflow-CVE-2026-33017-poc

CVE-2026-33017 — Langflow Unauthenticated RCE PoC For educational and authorized testing purposes only. Summary Langflow = 1.8.1 exposes a public flow build endpoint that accepts attacker-controlled flow data containing arbitrary code. This code is passed to prepareglobalscope in validate.py, whi...

CVE-2024-27954

⚠️ CVE-2024-27954 💀 自动远程代码执行利用工具 | 由 GhostSec 开发 💀 📝 描述 对受限目录的路径名限制不当（路径遍历）漏洞存在于 WP Automatic Automatic 中，可实现路径遍历及服务端请求伪造。此问题影响 Automatic：从 n/a 至 3.92.0 版本。 ⌛ 查询语句 FOFA = body="wp-content/plugins/wp-automatic" && header="HTTP/1.1 200 OK" ZoomEye = title:"wp-automatic" response.statuscode:200 Shoda...

CVE-2021-31728

CVE-2021-31727 and CVE-2021-31728 Public Reference for CVE-2021-31727 Exposes unrestricted disk read/write capabilities. Public Reference for CVE-2021-31728 Exposes arbitrary ring 0 code execution directly. Credit Lima X helped with SystemBigPoolInformation idea...

CVE-2025-60787

CVE-2025-60787 - Authenticated RCE in motionEye PoC for CVE-2025-60787 that is an Authenticated RCE vulnerability for motionEye with all afected versions up to 0.43.1b4 included. This is an automated PoC for the vulnerability described in this repository. Credits to prabhatverma47. Usage The scri...

CVE-2020-0688

Identify Exchange Servers vulnerable to CVE-2020-0688 CVE-2020-0688 is a critical vulnerability in Microsoft Exchange due to use of static keys. Although exploitation requires valid credentials at an email user level and the risk of mass-exploitation is low, this vulnerability might be very usefu...

CVE-2026-23744-PoC

Description MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Sinc...

CVE-2026-106374

A flaw was found in chromium-browser. A type confusion vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to visit a specially crafted HTML page. Successful exploitation compromises the browser process, whic...

CVE-2026-106439

A flaw was found in hydra-core. Target execution policies used during object instantiation are stored in mutable module-level state. An attacker who supplies crafted configuration entries can manipulate this policy to remove restrictions on blocked targets. Successful exploitation allows the...

CVE-2026-106318

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a crafted HTML page. This issue is caused by a use-after-free memory flaw in the Media component, where previously released memo...

CVE-2026-106235

A flaw was found in chromium-browser. A use-after-free vulnerability—where memory is accessed after it has been released—exists in the WebAudio component. A remote attacker could exploit this issue by enticing a user to visit a crafted HTML page, potentially leading to arbitrary code execution...

nmap-CVE-2022-21907

nmap-CVE-2022-21907 Repository containing nse script for vulnerability CVE-2022-21907. It is a component IIS vulnerability on Windows. It allows remote code execution. The vulnerability affects the kernel module http.sys, which handles most basic IIS operations. After uploading the payload, the...

WebKit-CVE-2016-4622

WebKit CVE-2016-4622 Analysis: Deep Dive into the Slice ValueOf Fastpath Vulnerability Comprehensive analysis and exploitation of the WebKit JavaScript Core vulnerability that enables memory disclosure through Array.slice manipulation Table of Contents Executive Summary Vulnerability Overview...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’,...