CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Research Comprehensive research to save you time, energy, sanity, & understanding. I want to start this off by saying that this specific CVE is like many in that due to its high severity score, it has gained an enormous amount...

CVE-2016-2098

CVE-2016-2098 Vulnerabilidad de ejecución remota de código en Ruby-on-Rails cuando se usa render con datos proporcionados por el usuario. Explicación: Este problema proviene del uso del método render con datos proporcionados por el usuario. El método render se usa normalmente para renderizar una...

CVE-2023-41892

CVE-2023-41892 Una vulnerabilidad de Craft CMS que permite Ejecución Remota de Código RCE...

cve-2022-26134

Atlassian Confluence OGNL Injection POC Vulnerabilidad CVE-2022-26134 ejecución de código arbitrario Uso: pip3 install termcolor python3 exploit.py http://example.com documentación:...

CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...

CVE-2026-92627

A flaw was found in HDF5. A heap-use-after-free vulnerability exists when converting a compound datatype containing floating-point members during a dataset read. An attacker can supply a specially crafted HDF5 file, which, when parsed by an application, can trigger this flaw. This can lead to a...

Bot-exploit-CVE-2025-55182

React2Shell Scanner – CVE-2025-55182 🔐 Herramienta educativa para detección de la vulnerabilidad CVE-2025-55182 React2Shell en aplicaciones que utilizan React Server Components / Next.js. 📌 Sobre el CVE-2025-55182 El CVE-2025-55182 , conocido como React2Shell , es una vulnerabilidad crítica que...

CVE-2021-42013

CVE-2021-41773 / CVE-2021-42013 Apache Vulnerability Scanner A comprehensive Python-based vulnerability scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. Overview CVE-2021-41773 and...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Confluence OGNL injection...

CVE-2024-46506

CVE-2024-46506 This is a standalone Python implementation for CVE-2024-46506. I created this script because I could only find the Metasploit module and needed a lightweight, portable version that doesn't require the full Metasploit Framework. Disclaimer This tool is intended for educational...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Detalles La vulnerabilidad existe en el método updateqrcode de la clase...

log4j-test

Simple Example showing CVE-2021-44228 in action Explanation To reproduce this issue, I am removing the transitive dependency for logging from SpringBoot. Instead, I am bringing in spring-boot-starter-log4j2 spring-boot-starter-log4j2 brings in log4j-core which has the remote code exploit RCE...

Additive-Vulnerability-Analysis-CVE-2021-41773

Additive-Vulnerability-Analysis-CVE-2021-41773 Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution...

irule-cve-2022-22965

irule-cve-2022-22965 Este es un iRule básico para proporcionar cierta mitigación contra CVE-2022-22965, también conocido como Spring4Shell. Probado en BIG-IP 15.x. Resumen El 30 de marzo de 2022, se encontró una vulnerabilidad de ejecución remota de código RCE en el Java Spring Framework,...

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: Vulnerabilidad de Path Traversal Zero-Day en Apache HTTP Server Explotada El 5 de octubre, el Proyecto Apache HTTP Server parcheó CVE-2021-41773, una vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server, un servidor web de código abierto...

Safer_PoC_CVE-2022-22965

SaferPoCCVE-2022-22965 Un PoC más seguro para CVE-2022-22965 Spring4Shell Funcionalidad Crea un archivo llamado CVE2022-22965exploited.txt en el directorio de tomcat 'webapps/ROOT' Argumento opcional del usuario para cambiar el directorio de salida La validación del exploit se realiza solicitando...

firewall

🛡️ Spring4Shell Firewall Defense – Cybersecurity Incident Simulation This project is part of a Cybersecurity Job Simulation I completed through Forage in August 2025. It simulates a real-world incident involving the Spring4Shell CVE-2022-22965 vulnerability and demonstrates how a custom firewall...

CVE-2023-42793

CVE-2023-42793 - Create username administrator Example of command execution: root@kitploit: python3 exploit.py -u http://localhost User add token - eyJ0eXAiOiAiVENWMiJ9.YkZ0V2tzR3NvWXhZelRfZTN0cFF1SkZjVWVz.N2M0Njk2ZTgtNWZhYi00MTU5LWJmZjQtYWU1MDFlYzZiMGY1 Successful execution, preparing for the RC...

CVE-2023-45878

CVE-2023-45878 Wrote this script based on the work of https://herolab.usd.de/security-advisories/usd-2023-0025/ . The exploit works by using an Arbitrary File Write exploit in Gibbon LMS 25.0.1 . This PoC will use upload a simple php cmd script, and then use that to load a powershell revshell...

log4j-CVE-2021-4104

HEAD Log4jShell1.x Log4j RCE 1.x Poc Attack Restriction 1. The target has jms environment 2. You need to gain access to modify the log4j.properties file Conclusion Not as useful as log4shell 2.x Log4shell Topic https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Welcome to contribute in...