rails-PoC-CVE-2016-2098

A Proof of Concept of vulnerability: CVE-2016-2098 University project created by @alejandro-marting where we can check the vulnerability 2096 Using: rails 4.2.5.1 view has a vulnerable code app/views/poc/render1.html.erb !...

CVE-2026-33017

CVE-2026-33017 — Langflow Unauthenticated Remote Code Execution Author: dynamo2k1 Severity: Critical CVSSv3: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Overview CVE-2026-33017 is a critical unauthenticated Remote Code Execution vulnerability in Langflow, an open-source platform for visually building...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 EXP VMware View Planner RCE CVE-2021-21978 Reverse shell...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 – XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing Unpack src.zip zip -r src.zip src Build and run vulnerabl...

CVE-2025-55182

CVE-2025-55182 Exploit A simple python script that exploits the vulerability in React Server Components in CVE-2025-55182 by injecting a shell in the application. The script is tested on Next.js version 16.0.6 Usage Clone the repository git clone https://github.com/ahmedshamsddin/CVE-2025-55182 R...

CVE-2024-29510

Original research and POC code: https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/ NOTE: I have made no changes to the POC apart from the command executed. Full credit goes to Thomas Rinsma @ Codean Labs for their amazing research and POC. Local Scenario 1...

CVE-2017-11176

CVE-2017-11176 Proof of concept for CVE-2017-11176 for code execution. Vulnerability The mqnotify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial...

CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...

CVE-2007-2447-RCE

This exploit helps you to get a reverse shell, exploting Samba 3.0.20 3.0.25 · When executing the script with python3 with the --help parameter, it asks us for a series of parameters --lhost LHOST your host ip where the shell will be received --lport LPORT your port port where the shell will be...

CVE-2024-27766

CVE-2024-27766 MariaDB v11.1 RCE via UDF — modified PoC based on Ant1sec-ops/CVE-2024-27766. Overview | ---|--- Affected| MariaDB v11.1 Fixed in| 10.5.25 / 10.6.18 / 10.11.8 / 11.0.6 / 11.1.5 / 11.2.4 / 11.4.2+ Type| RCE via User-Defined Function UDF MariaDB v11.1 allows an attacker with sufficie...

CVE-2022-37208

37208 CVE-2022-37208 Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...

Codify-TJNULL-OSCP-

Hack The Box — Codify Writeup Full penetration testing walkthrough and writeup for Codify machine on Hack The Box. 📌 Machine Info Field| Value ---|--- Name| Codify OS| Linux Difficulty| Easy Key Concepts| vm2 RCE CVE-2023-30547, SQLite DB Enum, Bcrypt Cracking, Bash Wildcard Pattern Matching Abus...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Authenticated Subscriber+ Arbitrary File Upload Description The Import Export For WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.5. This makes...

CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G backend remote code execution vulnerability CVE-2023-3306 2. CVE-2023-4169 unauthorized arbitrary password modification CVE-2023-4169 3. Ruijie RG-EW1200G login bypass CVE-2023-4415 Attention I developed a tool for local...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANT – Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...

RCE

This repository does not have a README...

CVE-2025-55182-exploit

CVE-2025-55182 Exploit This repository contains a simple exploit for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. Vulnerability Overview CVE-2025-55182 is an unauthenticated remote code execution vulnerability in React Server Components CVSS 10.0. Th...