CVE-2016-10033

CVE-2016-10033 This vulnerability affects PHPMailer 5.2.18 and is able to get Remote Code Execution. Resources https://vulners.com/cve/CVE-2016-10033 Usage As it is written in Golang, you can build the exploit yourself, as long there is golang installed into your system with: cd CVE-2016-10033 go...

Exploit-For-CVE-2022-36067

Exploit-For-CVE-2022-36067 This repo contains payload for the CVE-2022-36067 How to exploit? Paste the payload given in payload.js along with the command you want to run. Test on local machine. To test on local machine, git clone the repo, install the dependecies and run app.js using node. If the...

CVE-2024-7627-PoC

CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...

CVE-2026-7654

CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...

log4j_github_repository

This work includes testing and improvement tools for CVE-2021-44228log4j The purpose of this study is to list useful tools that the blue and red team can use against the Log4j vulnerability. Github links bypass tools, scanning, detection mechanisms, etc. can be used for. Scanning or POC 🔴 Title:...

CVE-2024-4879

CVE-2024-4879 ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024–4879, CVE-2024–5217, and CVE-2024–5178, affec...

bouvet

Bouvet Isolated code execution sandboxes for AI agents About • How It Works • MCP Tools • Documentation What is Bouvet? Bouvet boo-veh is an MCP server that creates secure, isolated sandboxes for AI agents to execute code. When an AI agent needs to run Python, Node.js, or shell commands, Bouvet...

CVE-2023-36664-Ghostscript-command-injection

Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...

CVE-2022-26134

「💥」CVE-2022-26134 Description In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17...

CVE-2007-2447-RCE

This exploit helps you to get a reverse shell, exploting Samba 3.0.20 3.0.25 · When executing the script with python3 with the --help parameter, it asks us for a series of parameters --lhost LHOST your host ip where the shell will be received --lport LPORT your port port where the shell will be...

CVE-2020-9548

CVE-2020-9548: FasterXML/jackson-databind Remote Code Execution Vulnerability...

CVE-2020-12078

CVE-2020-12078 The official exploit for Open-AudIT v3.3.1 Remote Code Execution CVE-2020-12078...

CVE-2024-53900

CTF Challenge - Mongoose RCE CVE-2024-53900 Challenge Overview This Capture The Flag CTF challenge is based on CVE-2024-53900, a vulnerability in Mongoose that allows Remote Code Execution RCE due to improper use of the $where operator in MongoDB queries. Your objective is to exploit this...

CVE-2024-20931

CVE-2024-20931 CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839 Oracle Weblogic Usage: Setup JNDI, the specific one from https://github.com/WhiteHSBG/JNDIExploit/ Exploit: java -jar CVE-2024-20931.jar Please input target IP:127.0.0.1 Please input target port:7001 Please input RMI...

git-fsmonitor

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The FSMonitor helper is executed by git on every command like git status, git diff, etc., hence git will blindly launch whatever path we specfic there. Our IDEs runs git status...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

CVE-2015-3306-Home-Lab

ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...

Article-RegreSSHion-CVE-2024-6387

RegreSSHion CVE-2024-6387: Critical Remote Code Execution Vulnerability in OpenSSH In an era where digital security is crucial, a new vulnerability in OpenSSH, identified as CVE-2024-6387, has drawn the attention of system administrators and security professionals worldwide. Named "regreSSHion,"...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic unauthorized access leading to arbitrary file upload/RCE vulnerability check script...

CVE-2024-51793

CVE-2024-51793 Exploit Tool Documentation 📋 Overview CVE-2024-51793 is an unauthenticated arbitrary file upload vulnerability in the Computer Repair Shop WordPress plugin versions prior to 3.8116. This vulnerability allows attackers to upload arbitrary files, including PHP webshells, without...