656998 matches found
CVE-2022-1388
CVE-2022-1388 A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges. USAGE python3 f5bigipscanner.py...
CVE-2025-55182
CVE-2025-55182 Original author:https://github.com/msanft/CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Backgrou...
CVE-2018-19422-SubrionCMS-RCE
CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Authenticated Remote Code Execution /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. Exploit Usage Commands: Windows/Linux: $ sudo python3...
wp2shell-poc
wp2shell-poc Independent proof-of-concept for the unauthenticated WordPress REST batch route-confusion SQL injection associated with Searchlight Cyber's wp2shell advisory. This repository is not Searchlight Cyber's official checker. check confirms the SQLi path, read demonstrates database read, a...
CVE-2022-30190
MS-MSDT Follina CVE-2022-30190 PoC Malicious docx generator to exploit Microsoft Office Word Remote Code Execution Creation of this Script is based on CVE-2021-40444 PoC by LockedByte and writeup by Tothi Using First modify backup.html and replace powershell payload. Right now just pops a calc.ex...
cve-2014-7920-7921
cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...
xwiki-cve-2025-24893-exploit
XWiki CVE-2025-24893 Exploit Unauthenticated Remote Code Execution exploit for XWiki versions vulnerable to CVE-2025-24893. Vulnerability Overview XWiki versions prior to 15.10.9 are vulnerable to unauthenticated RCE through Groovy script injection in the SolrSearch RSS feed handler. The...
CVE-2026-23744-MCPJAM-RCE-exploit
CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept targets a vulnerable MCP Model Context Protocol service exposed by the target application. The vulnerability allows an attacker to supply arbitrary server configuration parameters through the /api/mcp/connect endpoint. Affected Endpoi...
Spring-Boot-Tomcat-CVE-2025-24813
CVE-2025-24813: Apache 1. Explanation Tomcat is vulnerable because of two separate vulnerabilities, the first is a weakness in the DefaultServlet which allows partial puts to write a temp directory see:...
CVE-2023-21608
CVE-2023-21608 Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit Blog https://medium.com/@Kushagra007/adobe-acrobat-reader-resetform-cagg-uaf-rce-exploit-cve-2023-21608-652624346c8f DEMO...
CVE-2025-55182-Exploit
CVE-2025-55182 β React Server Components RCE Exploit β οΈ Disclaimer: For authorized security testing and research purposes only. Do not use against systems without explicit permission. Overview This is an improved version of the exploit script for CVE-2025-55182 React Server Components Remote Code...
ProxyLogon-CVE-2021-26855
ProxyLogon-CVE-2021-26855 RCE exploit for ProxyLogon vulnerability in Microsoft Exchange Working with Python 3.9 Usage: python proxylogonrce.py target email command Example: python proxylogonrce.py 192.168.227.137 [email protected] whoami All credits go to DEVCORE, based on...
CVE-2024-22198_Checker
CVE-2024-22198 - authenticated remote code execution in Nginx-ui Description This tool made for remote checking your Nginx-ui version and notify if it's vulnerable to CVE-2024-22198. Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by...
CVE-2025-24813
Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...
CVE-2021-26084
CVE-2021-26084 Atlassian Confluence Pre-Auth RCE...
Joomla-3.4.6---configuration.php-Remote-Code-Execution
Joomla-3.4.6---configuration.php-Remote-Code-Execution Affected versions: 3.0.0-3.4.6 1. Vulnerability verification python3 Joomla-3.4.6-RCE.py -t http://172.20.10.4 If "Vulnerable" is displayed, the vulnerability exists. python3 test.py -t http://127.0.0.1:8080/ --exploit --lhost 192.168.31.126...
BluetoothDucky
BluetoothDucky CVE-2023-45866 - BluetoothDucky implementation Using DuckyScript Unauthenticated bluetooth remote code execution. In short, run keyboard commands without pairing with their device This is an implementation of the CVE discovered by marcnewlin...
CVE-2020-11932
CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...
CVE-2021-44228
CVE-2021-44228 Apache Log4j Remote Code ExecutionοΌ all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x has other vulnerabilities, it is recommended to update to the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: Download this project, compi...
React2Shell-CVE-2025-55182-Advanced-Scanner
CVE-2025-55182 Advanced Scanner Advanced penetration testing tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js applications π Table of Contents Overview Features Installation Usage Examples Bypass Techniques Technical Details Disclaimer Contributing License π Overview...