657046 matches found
CVE-2024-49112
LDAP Nightmare An exploit for CVE-2024-49112 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...
CVE-2024-44193
Hacking Windows through iTunes - Local Privilege Escalation 0-day Introducing CVE-2024β44193 This is a write up on CVE-2024β44193 which is a Local Privilege Escalation exploit in iTunes version 12.13.2.3. It was patched September 12, 2024 by Apple. Link to Apple's Security Advisory: Apple's...
bassmaster-rce
bassmaster-rce Exploiting CVE-2014-7205 by injecting arbitrary JavaScript resulting in Remote Code Execution. I stumbled across this Post by LuuPhu written in viatnamese. Since I have written some code in NodeJS but never came across exploiting it, I figured why not today? The Python PoC includes...
CVE-2026-13714
CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2026-13714 β WPL Real Estate Unauthenticated RCE Realtyna Organic IDX plugin + WPL Real Estate for WordPress 5.3.0 Unauthenticated arbitrary file upload via...
CVE-2026-40217-PoC
CVE-2026-40217 β LiteLLM Guardrail Sandbox Escape LiteLLM POST /guardrails/testcustomcode β Sandbox Escape leading to Remote Code Execution RCE as root in default Docker deployment. Field| Value ---|--- CVE| CVE-2026-40217 CVSS| 8.8 HIGH β CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-913...
CVE-2020-0674
CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...
Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468
Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468 Detailed Analysis and script Mitigation Strategies for CVE-2024-38124 and CVE-2024-43468 CVE-2024-38124: Windows Netlogon Technical Exploitation Context: In a real-world scenario, an attacker with access to the...
CVE-2024-55187
Summary Sensitive administrative parameters are not sufficiently sanitized, allowing an attacker to poison paths to system binaries. The attacker can then upload dangerous CSV files that can then be treated as PHAR archives holding shell metacharacters that will be evaluated by PHP's exec call,...
CVE-2022-42889-Analysis
CVE-2022-42889 Text4Shell Report A repository that organizes an analysis report for Apache Commons Text CVE-2022-42889 and attack demonstration materials based on a closed test environment. Documents CVE-2022-42889 - Vulnerability Analysis Report Repository Structure CVE-2022-42889-Report/ ββ...
PSForgot2kEyXCHANGE
PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...
CVE-2020-5902
Readme F5 BIG-IP arbitrary file read + remote command execution RCE +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE + +-------------------------------------------------------------+ ...
CVE-2026-48907
CVE-2026-48907 CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to create new editor profiles, which can ultimately lead to arbitrary PHP file upload and remote code execution on affected systems Also if...
CVE-2021-20837
CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...
CVE-2007-1567
π CVE-2007-1567: War FTP Daemon 1.65 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in War FTP Daemon 1.65 demonstrating old-school remote code execution through malformed FTP commands. π Table of Contents Why this repository exists Why this vulnerability is interesting Context...
CVE-2018-14667-poc
CVE-2018-14667-poc Richfaces Vulnerability Environment and PoC Target Range: Deploy the war package under vulenvironment directly into tomcat PoC build:build artifactId run:java -jar CVE-2018-14667-poc.jar "cmd" about debug Directly extract the war under the vulenvironment's war package, then...
pyrocms-ssti-fix
π‘οΈ PyroCMS SSTI Fix Drop-in security fix for CVE-2023-29689 - Server-Side Template Injection leading to Remote Code Execution in PyroCMS 3.9. The Problem PyroCMS allows admin users to edit templates stored in the database. Without sandboxing, attackers with admin access can inject malicious Twig...
Exploit_CVE-2019-17558-RCE
ExploitCVE-2019-17558-RCE Apache Solr 1.4 Injection to get a shell to Encode url, postrequest, getrequest...
CVE-2023-4220
RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...
cve-2026-45033-class
Claude Code β git bare-repo / core.fsmonitor guard bypass PoC Proof-of-concept for the "malicious bare git repository βcore.fsmonitor β code execution" vulnerability class cf. CVE-2026-45033 in GitHub Copilot CLI reproduced against Claude Code , defeating the extra bash permission guard Claude Co...