CVE-2024-48990

CVE-2024-48990 introdution This vulnerability takes advantage of the way in which needrestart manages the environment variable, to be more precise, PYTHONPATH can be hijacked by modifying the PYTHONPATH variable to a directory that contains a malicious library, thus executing and gaining access, ...

CVE-2024-54262

CVE-2024-54262 Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce Overview This script exploits a vulnerability in the "Import Export for WooCommerce" WordPress plugin. The vulnerability allows unauthorized users to upload arbitrary files, leading to potential remote...

CVE-2024-10673

🔥 Overview This script exploits CVE-2024-10673 , a critical vulnerability found in the Top Store WordPress Theme = 1.5.4. The flaw allows authenticated users with subscriber-level access or higher to install and activate arbitrary plugins via unprotected AJAX requests. ⚠️ Severity & Impact...

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. usage:...

HFS2.3_poc

HFS2.3poc HFS2.3 Unauthenticated Remote Code Execution CVE-2024-23692 python HFS2.3poc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: HFS2.3poc.py -h...

Spring4Shell-Python-Firewall-POC

Python Firewall for Spring4Shell CVE-2022-22965 Mitigation 1. Overview This project is a simple but effective firewall implemented as a Proof-of-Concept POC in Python. It's designed to act as an HTTP server that inspects incoming POST requests to detect and block the specific payload pattern...

CVE-2025-4660

Description A PoC for CVE-2025-4660, Forescout SecureConnector RCE forescoutredirect.py This is the exploit itself where you can redirect an agent to a specific IP address under the attackers control forescoutc2.py A simple C2 implementation that speaks the ForeScout SecureConnector language...

CVE-2022-22947

CVE-2022-22947 poc for CVE-2022-22947 python CVE-202222947POC.py http://targetip:port/ Refer to POCs and articles from several experts 1.https://github.com/chaosec2021/CVE-2022-22947-POC 2.https://y4er.com/post/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882/14883/14750 USE 1. clone this repo 2. install requests lib 3. python3 14882.py E.G λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator reference https://github.com/jas502n/CVE-2020-14882...

CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...

CVE-2025-55182-Terminal

Next.js RSC Vulnerability Scanner CVE-2025-66478 / CVE-2025-55182 A lightweight, multi-threaded Proof of Concept PoC tool designed to detect and demonstrate the Next.js React Server Components RSC Remote Code Execution vulnerability React2Shell. This tool allows for both single-target verificatio...

CVE-2024-47176

CVE-2024-47176 Vulnerability Scanner for CUPS: CVE-2024-47176 Mass Scanner for CUPS Vulnerability CVE-2024-47176 is a specialized tool designed to detect the presence of the CVE-2024-47176 vulnerability across multiple systems running the Common Unix Printing System CUPS. This vulnerability, whic...

CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION

CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION...

Log4j_CVE-2021-44228

The Log4j vulnerability, also known as "Log4Shell" or "CVE-2021-44228," is a critical security flaw in the Apache Log4j library. Log4j is a widely used Java-based logging framework that allows developers to log messages from applications to various destinations, such as files, databases, and...

cve-2022-42475-Fortinet

cve-2022-42475 Código POC para explotar el desbordamiento de montón en el demonio SSLVPN de Fortinet Uso pip install pwntools Para usar este código, puedes guardarlo en un archivo, por ejemplo exploit.py, y luego ejecutarlo con Python en la línea de comandos, pasando los argumentos requeridos. Aq...

Atlassian_CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On May the 30th, 2022, an organisation named Volexity identified an un-authenticated RCE vulnerability scoring 9.8 on NIST within Atlassian's Confluence Server and Data Center editions...

CVE-2024-22274-RCE

Exploit CVE-2024-22274 Este repositorio contiene un exploit para CVE-2024-22274. El exploit crea un nuevo usuario en una máquina remota a través de SSH y luego proporciona una shell root. Requisitos Go Golang instalado en tu máquina. Puedes descargarlo desde aquí. Una máquina remota con acceso SS...

CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Exploit Overview This script exploits an authenticated arbitrary file upload vulnerability in Pluck CMS v4.7.18 CVE-2023-50564. By leveraging this vulnerability, an authenticated attacker can upload a malicious PHP file, enabling the execution of arbitrary code ...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...