516730 matches found
CVE-2023-39361
CVE-2023-39361 Unauthenticated SQL injection in Cacti v1.2.24 Overview Cacti is an open-source operational monitoring tool written in PHP, MySQL/MariaDB, which provides a friendly interface. The vulnerability was found in 2023 which affected all versions before 1.2.24. This security flaws lies in...
CVE-2020-0796
CVE-2020-0796 Scanner = https://github.com/ButrintKomoni/cve-2020-0796 Remote overflow POC = https://github.com/jiansiting/CVE-2020-0796 SMBGhostRCEPoC = https://github.com/chompie1337/SMBGhostRCEPoC...
ezwinrar
ezwinrar Python tool exploiting CVE-2018-20250 found by CheckPoint folks : https://research.checkpoint.com/extracting-code-execution-from-winrar/ By crafting the filename field of the ACE format, the destination folder extraction folder is ignored, and the relative path in the filename field...
LuCI_RCE_exp
CVE-2019-12272 の EXP CVE-2019-12272 は、LuCI の任意の bash コードを実行できる脆弱性です。 詳細 https://hachp1.github.io/posts/Web%E5%AE%89%E5%85%A8/20190710-lucirce.html 使用方法 python .\cve-2019-12272bandwidthstatus.py -a 192.168.153.4 -u root -p root -c ls python .\cve-2019-12272wirelessstatus.py -a 192.168.153.4 -u roo...
CVE-2020-27955
Git-lfs远程代码执行RCE漏洞利用 CVE-2020-27955 .bat / powershell 版本 受影响: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 等。 发现者 Dawid Golunski https://legalhackers.com https://exploitbox.io 在 Windows 上测试于: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code,...
CVE-2020-23934
CVE-2020-23934 References 1 https://www.exploit-db.com/exploits/48636 2 https://github.com/vj0shii/PRTG-Network-MonitorCMS-Authenticated-Remote-Code-Execution/blob/master/PRTGCMS.py 3 https://stackoverflow.com/questions/12385179/how-to-send-a-multipart-form-data-with-requests-in-python 4...
cve-2021-42013-httpd
Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...
clone_and_pwn
Headers Exploit Title: Clone and Pwn Date: June 4th, 2018 Exploit Author: Alejandro Caceres Vendor Homepage: https://git-scm.com/ Software Link: https://git-scm.com/downloads Version: arbitrary code is executed on git client versions In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15....
CVE-2017-11882
CVE-2017-11882 Original script from https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...
Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.
SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...
PHP_CVE-2012-1823
PHP-CGI リモートコード実行の脆弱性（CVE-2012-1823） 原理 参考記事 http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ 影響を受けるバージョン php...
CVE-2021-44228-Log4j-PoC-RCE
Apache Log4j CVE-2021-44228 GK7 PoC Pasos 1. Compilar Log4jRCE.java y mover el archivo .class a un servidor web ej: PHP local 1. cd src/main/java 2. javac Log4jRCE.java 3. Mover archivo .class a server web o iniciar localmente un php, por ejempl : php -S 127.0.0.1:8888 2. Iniciar LDAP Server 1. g...
CVE-2024-32002-git-rce
CVE-2024-32002-git-rce...
cve-2025-55182-react2shell-analysis
CVE-2025-55182 — React2Shell 漏洞分析 概述 本项目对 CVE-2025-55182 React2Shell 进行了技术分析，这是一个影响 React Server Components 的严重远程代码执行漏洞。 本研究的目的是理解该漏洞、分析其根本原因、在受控实验室环境中复现该问题，并研究适当的缓解策略。 本项目从攻击方和防御方两个安全视角来分析该漏洞。 漏洞详情 类别| 详情 ---|--- CVE| CVE-2025-55182 漏洞类型| 远程代码执行 RCE 受影响技术| React Server Components 严重程度| 严重 CVSS 评...
CVE-2022-30190_EXP_PowerPoint
CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-30190 on PowerPoint. Modify the suffix of the file to 'zip' and unzip the file, you can edit \ppt\slides\rels\slide1.xml.rels and replace to your vps ip:port like this, then compress them as the same way and change the suffix to 'ppsx'. The...
CVE-2025-24016
Wazuh Remote Code Execution RCE - PoC Vulnerability Overview This repository demonstrates the remote code execution RCE vulnerability in the Wazuh server, introduced by an unsafe deserialization in the wazuh-manager package. The vulnerability allows remote attackers with API access compromised...
CVE-2021-21110
CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit...
CVE-2021-26084
CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection Install requirements root@kitploit: pip3 install -r requirements.txt Run exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py...
OHTS
OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...