eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerability is RCE vulnerability in outdated eval-stdin.php. This exploit is just automation for mentioned vulnerability and is still in development. Scripted in Ruby 3.0.4 within 2 hours, tested on Kali linux, Arch Linux, Ubuntu minimal and Termux. How to...

redis-stack-CVE-2024-55656

CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow Remote Code Execution Vulnerability Title: Redis Stack RedisBloom Integer Overflow Remote Code Execution Vulnerability ZDI: ZDI-25-009 CVE: CVE-2024-55656 Credits: rick2600 and gqsilva CVSS: 8.8 HIGH Affected version: RedisBloom v2.6.12...

CVE-2016-6366

CVE-2016-6366 Public repository for improvements to the EXTRABACON exploit, a remote code execution for Cisco ASA written by the Equation Group NSA and leaked by the Shadow Brokers. There is improved shellcode, a LINA offset finder script, a Metasploit module, and extrabacon-2.0. We are adding...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

CVE-2019-16278

CVE-2019-16278 💻 -h3x0v3rl0rd- nostromo 1.9.6 - Remote Code Execution...

l4j-tp1

log4shell true positive This is a simple web project with a log4shell vulnerability. The project defines a simple scabench.HelloWorldService get service returning a plain text string hello world. The service does not expect parameters, and if parameters are encountered, an error is logged. The...

POC-CVE-2025-68613

Описание PoC-эксплойт для аутентифицированной RCE-уязвимости N8N CVE-2025-68613 Использование python3 poc.py -u -c...

BIG-IP-F5-TMUI-RCE-Vulnerability

BIG-IP-F5-TMUI-RCE-Vulnerability CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerability RCE PoC/ Test Script...

CVE-2021-41773

CVE-2021-41773 Простой bash POC-скрипт для уязвимости Path Traversal & RCE в Apache 2.4.49 Пример использования: Настройте netcat listener: $ nc -nvlp Затем запустите скрипт: $ ./exploit.sh Отказ от ответственности Этот инструмент предназначен только для образовательных целей. Я не несу...

CVE-2026-103065 WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

CVE-2026-103065 WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

POC-CVE-2012-1831

POC-CVE-2012-1831 Proof Of Concept for the CVE-2012-1831 Kingview Touchview 6.53 Background on Kingview KingView® is a powerful Windows-based industrial SCADA software for monitoring & controlling industrial processes. With over 25 years of development, it's now known for being the best selling...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE simple poc...

CrafterCMS-CVE-2025-6384

Аутентифицированный RCE в CrafterCMS - Обход песочницы Groovy CVE-2025-6384 Proof of Concept для аутентифицированной уязвимости удалённого выполнения кода в CrafterCMS. Сводка об уязвимости Аутентифицированный пользователь с правами разработчика может обойти песочницу Groovy-скриптов в Crafter...

D-Link

CVE-2024-10914 Удаленное выполнение кода в D-Link RCE D-Link NAS — Внедрение команд через параметр Name CVE-2024-10914:- Уязвимость была обнаружена в D-Link DNS-320, DNS-320LW, DNS-325 и DNS-340L до версии 20241028. Она признана критической. Данная уязвимость затрагивает функцию cgiuseradd файла...

golang-webmin-CVE-2022-0824-revshell

golang-webmin-CVE-2022-0824-revshell RCE in Webmin target url c - creds for webmin sl - your local server IP and port to host your payload s - callback ip p - callback port References https://www.webmin.com/security.html https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/...

EXPLOITING-CVE-2024-27956

Python script that exploits CVE-2024-27956, a vulnerability in Wordpress that allows SQL Injection leading to Remote Code Execution...

CVE-2022-31814

CVE-2022-31814 Updated Exploit - pfBlockerNG = 2.1.426 Unauth RCE CVE-2022-31814 Description This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads,...

CVE-2024-7954POC

CVE-2024-7954POC The porteplume plugin used in SPIP versions before 4.30-alpha2, 4.2.13, and 4.1.16 has an arbitrary code execution vulnerability. Remote unauthenticated attackers can execute arbitrary PHP code as SPIP users by sending specially crafted HTTP requests...

exploit_CVE-2022-26134

exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This script can find vulnerable server for CVE-2022-26134 from Shodan Search Engine. Just need to ent...