CVE-2024-9441

CVE-2024-9441 Description of the Vulnerability: This code exploits a Remote Code Execution RCE vulnerability that occurs due to improper input sanitization in a PHP-based web application. The specific weakness is in the "forgot password" functionality index.php?c=user&m=forgotpassword, where user...

weblogic_wls_wsat_rce

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....

log4shell-homework9

Homework 9 – Securing Systems Against Log4Shell Exploits Overview This project demonstrates the exploitation and mitigation of the Log4Shell vulnerability CVE-2021-44228 using a Dockerized Java web application with vulnerable Log4j 2.14.1. The setup also includes a simulated malicious LDAP server...

FUDforum-XSS-RCE

FUDforum-XSS-RCE FUDForum 3.0.9 - XSS / Remote Code Execution CVE-2019-18873, CVE-2019-18839 Multiple Stored XSS vulnerabilities have been found in FUDforum 3.0.9 that can result in remote code execution. Stored XSS via username in forum: Info | Demo Stored XSS via useragent in admin panel: Info ...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: docker run --name...

CVE-2026-53753-Crawl4AI-RCE

CVE-2026-53753 — Crawl4AI Unauthenticated Remote Code Execution AST Sandbox Escape Pre-authentication RCE in Crawl4AI.read — returning the command's output in-band in the JSON response. | ---|--- CVE| CVE-2026-53753 Advisory| GHSA-qxjp-w3pj-48m7 Affected| Crawl4AI Deep dive: see ANALYSIS.md for a...

CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution

CVE-2026-3844 – Breeze Cache WordPress Plugin Unauthenticated RCE -red?style=flat-square CVE-2026-3844 is a critical unauthenticated arbitrary file upload vulnerability in the Breeze Cache WordPress plugin versions ≤ 2.4.4. An attacker can post a comment containing a malicious tag pointing to a P...

CVE-2026-44789-n8n-PrototypePollution-RCE

CVE-2026-44789 — n8n HTTP Request Node Pagination Prototype Pollution → RCE An authenticated n8n The public advisory states only that the pollution "combined with other techniques could lead to RCE" — it does not disclose a gadget. This repo documents and automates a concrete, verified...

CVE-2026-58424

CVE-2026-58424 - Gitea Fork PR Workflow Approval Gate Bypass Severity: High CVSS 8.9 Affected: Gitea ≤ 1.26.2 Fixed in: Gitea 1.26.3 Advisory: GHSA-777r-4v59-6486 Vulnerability Description Gitea Actions enforces an approval gate on workflow runs triggered by fork pull requests. The gate is...

CVE-2007-2447

CVE-2007-2447 Saikat Karmakar | Oct 14 : 2022 Usage: python3 exploit-smb-3.0.20.py -lh -lp -t requirements pysmb argparse P.S. I'm not the author of this cve. I barely had a computer when this cve was created. I tried to create am automated script to exploit CVE-2007-2447...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE Exploit Exploit Title: Wing FTP Server 7.4.4 Remote Code Execution via Lua Injection CVE: CVE-2025-47812 Tested on: Wing FTP Server v7.3.x Windows/Linux Impact: Remote Code Execution RCE as SYSTEM/root Severity: Critical Description A vulnerability in Wing FTP...

CVE-2022-41082

CVE-2022-41082 This repository contains a proof-of-concept PoC tool for exploiting the OWASSRF vulnerability CVE-2022-41082 in Microsoft Exchange servers. The exploit allows attackers to execute arbitrary commands on the server, potentially compromising the system. Overview The tool leverages an...

eternalblue-ms17-010-research

💀 EternalBlue MS17-010 Exploitation Research Controlled reproduction of CVE-2017-0144 — the SMB vulnerability behind the WannaCry ransomware outbreak ⚠️ Disclaimer: This research was conducted in a fully isolated, controlled lab environment for academic and educational purposes only. No production...

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository contains a proof‑of‑concept exploit for CVE‑2025‑24367 , an authenticated remote code execution vulnerability in Cacti. The issue abuses insufficient input sanitization in graph template handling. By injecting malicious content into the...

Unomi-CVE-2020-13942

CVE-2020-13942 Apache Unomi Remote Code Execution Vulnerability Script Vulnerability Overview Apache Unomi is an open-source Java data platform, a Java server designed to manage data of customers, prospects, and visitors, and to help personalize customer experiences. Unomi can be used to integrat...

react2shell-poc-CVE-2025-55182

React2Shell PoC CVE-2025-55182 A Proof-of-Concept PoC script for React2Shell CVE-2025-55182, a critical remote code execution RCE vulnerability affecting Next.js applications using Server Actions. !WARNING Disclaimer : This tool is for educational and authorized testing purposes only. I am not...

CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd CVE-2021-44228-log4jVulnScanner-metasploit...

CVE-2025-24893-RCE-PoC

Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Installation python3 -m pip install requirements.txt Usage Connecting python3 poc.py Example With debug set to False default python...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679. FIRST: I AM NOT RESPONSIBLE FOR WHAT YOU DO WITH IT. SECOND: apt-get install parallel curl...

CVE-2026-25089

CVE-2026-25089 - Draft - Fortinet FortiSandbox ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone...