CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

CVE-2024-52380-Exploit

CVE-2024-52380-Exploit Picsmize plugin for WordPress is vulnerable to arbitrary file uploads. Description This script exploits a vulnerability CVE-2024-52380 in the Picsmize plugin for WordPress, allowing unauthenticated attackers to perform arbitrary file uploads. This vulnerability exists in al...

CVE-2019-15858

CVE-2019-15858 Unauthenticated Remote Code Execution at Woody Ad Snippets PoC The vulnerabilities discovered by nintechnet and exploit released by GeneralEG & X-Vector An unauthenticated options import vulnerability combined with a stored XSS vulnerability can lead to remote code execution in the...

CVE-2017-9606

CVE-2017-9606 Due to insufficient of checking integrity, authenticity and low user rights on update folder local user can craft fake ViPNet update files with arbitrary execution code and place them in ViPNet update folder. After placing fake update files in ViPNet update folder, ViPNet update...

Remot3d

Remot3d - An Easy Way To Exploiting Will be update soon It's easy to create a backdoor in an instant, the backdoor can be used in a remote process via a Linux terminal on the server that runs the PHP Language program. Made to bypass the system that is disabled on the server, especially for readin...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

CVE-2022-40634

CVE-2022-40634: FreeMarker Server-Side Template Injection in CrafterCMS By inserting malicious content in a FTL template, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote Code Execution...

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it. Resource Vuln Info https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data Usage nuclei -t...

Poleposph

Poleposph Tools for scan CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution RCE...

CVE-2025-48827

Description: RCE for Vbullettin versions between 5.0.0 - 5.7.5 and 6.0.0 - 6.0.3 with PHP 8.1 Futures: Multi thread Read from multiple target from file Detect vbullettin websites Checks vulnerabilit, if succes upload a php webshell Detail of usage: usage: CVE-2025-48827.py -h --url URL --list LIS...

cisco-rce

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

CVE-2026-39987

CVE-2026-39987 — Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

CVE-2021-21220

Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...

BIG-IP-F5-TMUI-RCE-Vulnerability

BIG-IP-F5-TMUI-RCE-Vulnerability CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerability RCE PoC/ Test Script...

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...

CVE-2026-42167-PoC

CVE reported by ZeroPath Research original writeup: https://zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce my version : https://jimmexploit.vercel.app/cve/proftpd-unauthenticated-sql-injection-leads-to-rce Description This repository contains a functional exploit for...

CVE-2016-10033-PoC

CVE-2016-10033-PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Has interactive shell, nice argparse stuff asw Usage usage: poc.py -h --target TARGET --backdoor BACKDOOR --proxy --raw...

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

CVE-2018-1000861

CVE-2018-1000861 Simple script to exploit CVE-2018-1000861, written in Python 3 Usage: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help show this help message and exit -u URL, --url URL Target Jenkins server -c CMD, --cmd CMD Command to execute -r, --revshell Execute...