collision-webshell

Webshell Collision This repository contains 2 files that have the same MD5 hash: webshell.php normal.php MD5 for the files: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php Hexdump for the webshell.php: $ hexdump -C webshell.php 00000000 3c 3...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

vsftpd2.3.4-backdoor-exploit

vsftp2.3.4-backdoor-exploit vsftpd 2.3.4 Backdoor Exploit CVE-2011-2523 Requirements Python 3.11+ recommended psutil Python package Installation Windows 1. Make sure Python is installed: py --version 2. Install dependencies: py -m pip install psutil 3. Run the script: py vsftpd234backdoor.py macO...

CVE-2018-7602

CVE-2018-7602 A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - High...

CVE-2023-4220-exploit

CVE-2023-4220-exploit Unrestricted file upload in the large file upload functionality at /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS versions = 1.11.24 allows unauthenticated attackers to perform stored Cross-Site Scripting attacks and achieve remote code execution by...

CVE-2024-29847

CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-29847 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/ivanti-epm-CVE-2024-29847-deserialization-RCE/ Usage...

CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

spring-rce-poc

spring-rce-poc Testing CVE-2022-22968 Simple app vulnerable to CVE-2022-22968 Dockerfile could be used to build it on vulnerable version of Tomcat 9.0.59 exploit.sh is a shell script which is trying to exploit this cve on 8080 port of localhost If attack with exploit.sh was succesfull, on context...

CVE-2012-2982

This PoC exploit for CVE-2012-2982 was written as an exercise for the "Intro to PoC scripting" Room on TryHackMe. The room can be found here: https://tryhackme.com/room/intropocscripting I was originally going to use Python to follow along, but decided to practice my Rust skills instead. I also s...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass 🔥 Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...

CVE-2024-23346-exploit

CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...

CVE-2025-471812-POC

/ | / | / / | / / / |/ // / / / / / / &password= 2. Server authenticates "anonymous" truncated at NULL but writes full payload into session file → returns UID cookie 3. GET /dir...

CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 Test Script This project provides a simple Bash script for testing whether an Oracle WebLogic server is vulnerable to the authentication bypass CVE-2020-14882 and the associated remote code execution vector CVE-2020-14883. The script sends a POST request t...

CVE-2024-2044

PoC CVE-2024-2044: pgAdmin 4 Authenticated RCE Linux/POSIX This repository contains a Proof of Concept PoC script for CVE-2024-2044 , a critical vulnerability that combines Authenticated Path Traversal and Unsafe Deserialization in pgAdmin 4 versions 8.3 and below running in a Linux/POSIX...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 - Unauthenticated Arbitrary File Upload Description The AR for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 6.2. This makes it possible for unauthenticated...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 dork on shodan https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 Curl poc curl -v...

React2Shell-PoC-CVE-2025-55182

React2Shell CVE-2025-55182 Exploitation Simulation Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability affecting...

CVE-2014-8731-PoC

CVE-2014-8731-PoC - PHPMemcachedAdmin Remote Code Execution I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2014-8731-PoC...

BUK_TS_KILLER

BUKTSKILLER BUK-TS Exploit RCE Authentification Bypass - CVE-2026-12183: 1. write any password 2. intercept response 3. write "userid=" 4. successfully bypassed Public Exploit for BDU:2025-13914 and CVE-2026-3843...