CVE-2025-55182-shellinteractive

CVE-2025-55182-shellinteractive Base used from: https://github.com/Emiyelbarto/CVE-2025-55182-PoC Thank you very much for the great contribution. Overview CVE-2025-55182 is a deserialization vulnerability in Next.js/React Server Components that allows unauthenticated remote attackers to execute...

cve-2021-31630

cve-2021-31630 OpenPLC WebServer v3 - Authenticated RCE This PoC script is based on the exploit provided by Fellipe Oliveira. Features : Directly uploads C code to /hardware instead of st file upload Restores default program before uploading reverse shell Improved C based reverse shell which is n...

EpSiLoNPoInTlnk

README EpSiLoNPoInTlnk CVE-2026-21510 - .LNK Generator Tool for generating .lnk files exploiting the CVE-2026-21510 vulnerability Windows ShellLink Remote Code Execution. Designed for offensive security research, authorized penetration testing, and vulnerability analysis. Legal Warning ⚠️ THIS TOO...

CVE-2018-12613

CVE-2018-12613 Local file inclusion bug due to filter bypass using %253f character. Software Affected 1. PHPMyAdmin v.4.8.0 2. PHPMyAdmin v.4.8.1 How to use This PowerShell scripts need three parameters to craft a exploit HTTP request: 1. PHPMyAdmin URL endpoint 2. Cookies for an authenticated us...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Interactive shell HTTP hijack + POST + AES-256-CBC/BASE64 Detection -dnslog DNSLog No-Output Detection Nuclei -poc Vulnerability Echo Detection Exploitation -exp Interactive shell base64 echo -exp2 Interactive shell HTTP hijack + POST + Base64 -exp3...

CVE-2020-9484_Exploit

CVE-2020-9484Exploit Exploit for Apache Tomcat deserialization CVE-2020-9484 which could lead to RCE Affected versions: Apache Tomcat 10.x exploit.sh exploit.sh your IP your port target IP target port...

msf-module-CVE-2019-0708

CVE-2019-0708 Bluekeep Metasploit module for CVE-2019-0708 BlueKeep Pulled from https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/exploits/windows/rdp and fixed File copy instructions 1. Make a folder named 'rdp' in...

spring-rce-poc

spring-rce-poc Testing CVE-2022-22968 Simple app vulnerable to CVE-2022-22968 Dockerfile could be used to build it on vulnerable version of Tomcat 9.0.59 exploit.sh is a shell script which is trying to exploit this cve on 8080 port of localhost If attack with exploit.sh was succesfull, on context...

hekate

Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...

motionEye-RCE-through-config-parameter

MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that client-side validation within the web UI can be bypassed. This allows arbitrary input to be submitted, including payloads that can trigger execution on t...

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC A POC for CVE-2024-32002 demonstrating Remote Code Execution RCE. See cve-2024-32002-poc-rce for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines the malicious...

CVE-2018-6789-Python3

CVE-2018-6789 Exim 4.90.1 RCE Vulnerability Exim 4.90.1 RCE Vulnerability remake for Python3 with arguments passed from CLI Usage: python3 exim.py -t localhost -p 25 -lh 192.168.0.159 -lp 1337...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 Apache Dubbo deserialization RCE video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4...

CVE-2025-34040Exp

Seeyon OA has file upload leading to RCE CVE-2025-34040 Parameters options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 -n FILENAME, --filename FILENAME 请输入文件名（默认为Hello.jsp）： -c CONTENT, --content CONTENT 请输入上传的文件内容（默认为HelloWord）：...

CVE-2019-0887

CVE-2019-0887 Compile the CVE-2019-0887, rename to winhlp.dll Compile the InstallHook, rename to hook.exe be careful, they must be compile with x64 Put then into the evil system just like that c:\windows\hook.exe c:\windows\winhlp.dll c:\windows\winhlp64.exe something evil if somebody want to...

CVE-2023-42793

CVE-2023-42793 TeamCity CVE-2023-42793 RCE Remote Code Execution rce.py Inspired by - https://www.prio-n.com/blog/cve-2023-42793-attacking-defending-JetBrains-TeamCity python3 rce.py --url teamcity.runner.htb --command whoami exploit.py This script is copy of...

CVE-2022-48565-POC

CVE-2022-48565 PoC Introduction This is a Proof of Concept PoC demonstrating the vulnerability CVE-2022-48565 , which is based on unsafe deserialization of Plist files in Python. By processing specially crafted Property List Plist files, an attacker can execute arbitrary code on the target system...

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Lab Setup docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000 Description Versions of the package...

CVE-2020-7961

CVE-2020-7961 Exploit script for CVE-2020-7961 Unauthenticated Remote code execution via JSONWS References & inspirations original blogpost : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html synacktiv blogpost :...

CVE-2026-21643

🚨 CVE-2026-21643 "FortiGhost" : Pre-Auth SQLi RCE in FortiClientEMS Unauthenticated SQL Injection in FortiClientEMS 7.4.4 Potential Remote Code Execution via crafted HTTP requests to the admin GUI 📋 Overview CVE-2026-21643 is a critical SQL injection vulnerability CWE-89 affecting Fortinet...