RTOS-F-16-Exploit---CVE-2019-7711

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Full Format String Exploitation Chain Realistic Ground Maintenance Attack on F-16 Avionics 📋 Description This repository contains a Proof of Concept PoC for CVE-2019-7711 — a Format String vulnerability in the Interpeak IPCOMShell TELNET...

CVE-2022-26810

CVE-2022-26809 RCE Exploit CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the...

CVE-2019-8561

CVE-2019-8561 Proof of concept exploit for CVE-2019-8561 discovered by Jaron Bradley @jbradley89 Patched in macOS 10.14.4. This script exploits a TOCTOU bug in installer which enables code execution as root. See Jaron's Objective By the Sea v2 talk "Bad Things in Small Packages" where he...

CVE-2026-13768

CVE-2026-13768 - Gardyn IoT Hub Owner Key Exposure !WARNING This repository contains a fully functional proof-of-concept for a high-severity IoT vulnerability. This code is provided strictly for educational purposes, authorized security research, and defensive testing. Unauthorized use is illegal...

CVE-2025-49596-PoC

CVE-2026-23744-PoC Automated PoC for CVE-2026-23744 RCE on MCPJam inspector prior to 1.4.2 on linux targets How to use use netcat to run listener on any port like 9002. nc -nvlp 9002 use the automation like this python3 CVE-2025-49596.py https://mcpjam-server.com...

CVE-2025-55182

React2Shell Ultimate Scanner Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-55182 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-55182 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Server...

CVE-2025-24016

Wazuh Remote Code Execution RCE - PoC Vulnerability Overview This repository demonstrates the remote code execution RCE vulnerability in the Wazuh server, introduced by an unsafe deserialization in the wazuh-manager package. The vulnerability allows remote attackers with API access compromised...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Insecure Deserialization in Blockchain Oracle Overview A blockchain oracle node deserializes data from a smart contract event using Python’s pickle, allowing an attacker to execute arbitrary commands. Severity: Critical Full Node Compromise Oracle Simulation & Exploit...

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadata Severity: Critical 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb remote code execution | cve-2022-22980 poc Description A Spring Data MongoDB application is vulnerable to SpEL injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value...

CVE-2017-12149

CVE-2017-12149 Coded by 1337g Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

PIL-RCE-Ghostscript-CVE-2018-16509

Python PIL/Pillow Remote Shell Command Execution via Ghostscript CVE-2018-16509 Inspired by https://github.com/ysrc/PIL-RCE-By-GhostButt PIL/Pillow RCE via CVE-2017-8291. This docker environment version is using the newer version of Ghostscript v9.23 and newer exploit CVE-2018-16509. Ghostscript ...

CVE-2025-32433

CVE-2025-32433 Introduction This document presents a study of the vulnerability CVE-2025-32433 , affecting the built-in SSH server implementation in the Erlang/OTP platform. This vulnerability is a Remote Code Execution RCE opportunity without authentication and affects several Erlang/OTP branche...

POC-CVE-2025-55182

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation chmod +x scanner.sh Usage Scan with default command id ./scanner.sh -d example.com Execute custom command ./scanner.sh -d example.com -c...

CVE-2021-39115

CVE-2021-39115 Template Injection in Email Templates leads to code execution on Jira Service Management Server I Building I have provided a guide for deployment + debug here, you can refer to it. II Analysis The Description of this CVE already clearly states that the bug lies in the Email Templat...

SlackShell

SlackShell Description & Changelog v1.0 This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a supplied API authentication token f...

CVE-2025-25257

🚨 CVE-2025-25257 – FortiWeb SQLi to RCE Critical SQL Injection → Webshell Execution Discovered and weaponized by 0xgh057r3c0n 🧠 Vulnerability Overview CVE-2025-25257 affects FortiWeb systems exposing the endpoint /api/fabric/device/status, which fails to properly sanitize Authorization header...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...

Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-

Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597- Sri Lanka Institute of Information Technology Assignment 1 M. P. D. M. Dias IT19165530 MLBWDY2S113.1 Point to Point Protocol Daemon RCE Vulnerability CVE-2020-8597 Systems and Network Programming– IE2012 Content 1. Introduction 2...

CVE-2025-57310

CVE-2025-57310 A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Base Score: 8.8 High...