Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT PARA USAR EN METASPLOIT, PERMITE A LOS ATACANTES OBTENER UNA EJECUCIÓN REMOTA DE CÓDIGO A TRAVÉS DE MICROSOFT OFFICE WORD AL INYECTAR CÓDIGO MALICIOSO EN EL ARCHIVO...

CVE-2018-14667

CVE-2018-14667 detail:https://xz.aliyun.com/t/3264 poc calcwindows：...

CVE-2020-5902

CVE-2020-5902 F5 BIG-IP Traffic Management User Interface TMUI Remote Code Execution In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflow PoC Companion PoC for the Hunt-Benito article "GO Without Bounds: CVE-2026-67822 — Stack Overflow in Tenda W6-S'swifiSSIDset Form Handler". CVE-2026-67822 CVSS 9.8 Critical, CWE-121 is a stack-based buffer overflow in formwrlSSIDset, t...

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: Current source: MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not...

CVE-2025-6058

⚡ WPBookit = 1.0.4 - Unauthenticated Arbitrary File Upload 📝 Description The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle function, which is hooked via the addbookingtype route in all versions up to, and...

CVE-2021-44228-demo

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...

CVE-2026-89472

A flaw was found in the Linux kernel's power supply charger-manager component. A race condition exists where the system frees charger regulators before their corresponding sysfs entries are unregistered. A local attacker can exploit this by performing a concurrent write to a charger's...

cve-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...

CVE-2021-3129

CVE-2021-3129 root@kitploit: 生成自定义命令的phar包： php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a 进入php命令行环境 $fp = fopen'php://output', 'w'; streamfilterappend$fp, 'convert.quoted-printable-encode'; $size = ""; fwrite$fp,...

CVE-2023-3519

CVE-2023-3519 Because you can run powershell on ur mum's PC without having to install NMAP or PYTHON or tell anyone you run ARCH! ; x...

CVE-2026-Pending-Claude-Desktop-RCE

This repository does not have a README...

CVE-2023-37941

Superset 기본 캐시 내 Pickle RCE 악용 정보 root@kitploit: 저자 Dinis Cruz 프로젝트 Superset 설명 Apache Superset는 캐싱을 위한 여러 옵션을 제공하며, 모두 Flask-Caching을 기반으로 합니다. 내장 캐시는 값을 나중에 검색하기 위해 직렬화합니다. 이 직렬화 및 검색은 Pickle을 사용하여 수행되며, 이는 Python 객체의 역직렬화를 허용하여 코드 실행으로 이어집니다. 내장 캐시는 메타데이터 데이터베이스에 정보를 기록하며, 이는 이 데이터베이스에 접근할 수 있...

CVE-2026-89729

A flaw was found in the Linux kernel's Human Interface Device HID sensor-hub driver. A local attacker could exploit this vulnerability by providing a specially crafted HID descriptor. This malicious descriptor could cause the sensorhubgetfeature function to write data beyond the intended memory...

CVE-2026-89688

A flaw was found in the Linux kernel's nfsd component. During a seqidop replay retry, the system incorrectly handles reference counts for stateowners, leading to a reference count underflow and a use-after-free vulnerability. This issue could allow an attacker to potentially cause a denial of...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...

CVE-2025-24016

CVE-2025-24016 Una vulnerabilidad de deserialización insegura en los servidores Wazuh permite la ejecución remota de código mediante la inyección de diccionarios no saneados en las solicitudes/respuestas DAPI. Este problema surge de la forma en que los parámetros de DistributedAPI se serializan...

CVE-2022-22965

🚨 CVE-2022-22965 — "Spring4Shell" Vulnerabilidad crítica de ejecución remota de código RCE Divulgada públicamente: 31 de marzo de 2022 📖 Índice de contenidos Descripción general Componentes afectados Causa raíz técnica Condiciones de explotación Impacto Severidad y CVSS Mitigación y parches...

Roundcube-CVE-2025-49113

Exploit RCE de Roundcube CVE-2025-49113 Un exploit de prueba de concepto totalmente funcional para CVE-2025-49113 🧠 Resumen CVE-2025-49113 es un La vulnerabilidad es el resultado de un fallo lógico en el analizador de sesiones de la aplicación, que permite la deserialización insegura de objetos...

CVE-2026-33017-PoC-Reverse-Shell

CVE-2026-33017 - Langflow Unauthenticated RCE Exploit 📋 Overview CVE-2026-33017 is an unauthenticated Remote Code Execution RCE vulnerability in Langflow versions This exploit is for educational and authorized testing purposes only. Unauthorized access to computer systems is illegal. Use this too...