CVE-2022-30075

CVE-2022-30075 Authenticated Remote Code Execution in Tp-Link Routers Affected Devices If your Tp-Link router has backup and restore functionality and firmware is older than june 2022, it is probably vulnerable Tested With Tp-Link Archer AX50, other tplink routers may use different format of...

write-ups

write-ups RCE in Github Desktop v2.9.4 RCE via gh run download GitHub CLI Claude Code: unsandboxed code execution from prompt injection via .git worktree confusion — CVE-2026-55607...

CVE-2024-47176

CVE-2024-47176 — CUPS RCE Exploit Lab CyberSecurity & Virtualisation 2025-2026 Isolated lab environment to demonstrate CVE-2024-47176 CUPS Remote Code Execution via cups-browsed. Setup Required VDIs Ubuntu 22.04 NOT 24.04! — https://www.osboxes.org/ubuntu/ → VirtualBox VDI Kali Linux 2026.1 —...

react2shellpoc

This repository contains a proof‑of‑concept demonstrating how a specific class of React Server Component vulnerabilities behaves inside a controlled, legal training environment. Manual ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ || CVE-2025-55182 React Serv...

Alfa-Perl-RCE-ZoneH-Grabber-Python

Alfa-Perl-RCE-ZoneH-Grabber-Python Python2.7 These tools are open source, you can recode them but remember never to delete the author tools, and these tools are free, not for sale!!! Results Shell Depends on Your List !!! Here, Jenderal92 is not responsible for the misuse of tools that cause dama...

Struts2_S2-062_CVE-2021-31805

Struts2S2-062CVE-2021-31805 Apache Struts2 S2-062 Remote Code Execution Vulnerability CVE-2021-31805 | Reverse Shell Vulnerability Reproduction Environment docker-compose.yml version: '2' services: struts2: image: vulhub/struts2:2.5.25 ports: - "8080:8080" Pull the image and start the environment...

cve-2026-21440-writeup-poc

cve-2026-21440 path traversal to arbitrary file write in @adonisjs/bodyparser overview a critical path traversal vulnerability exists in the @adonisjs/bodyparser package that allows remote attackers to write arbitrary files outside the intended upload directory. when the multipartfile.move functi...

spinnaker-poc

Spinnaker Vulnerability POCs Proof-of-concept demonstrations for CVE-2026-32604 and CVE-2026-32613, two 10.0 severity vulnerabilities in Spinnaker that allow for code execution and production cloud credential theft. Video walkthrough of how to use these POCS Technical blog with more details...

CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information Published : 2024-09-26 Base Score : 5.3 MEDIUM EPSS Score : 0.06% Probability of exploitation. Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description : CUPS is a standards-based, open-source printing system, and...

CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

rapid7-CVE-2026-15409

CVE-2026-15409 This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via...

CVE-2026-3502---TrueConf-Client-Update-Hijacking-PoC

🔓 CVE-2026-3502 - TrueConf Client Update Hijacking Exploit ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. 📋 Description Exploit for CVE-2026-3502 - update vulnerability without integrity verification in TrueConf...

CVE-2026-56290

CVE-2026-56290 - Compagebuilderck Mass Exploit ⚠️ Disclaimer This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal Use this tool only on systems you own or have explicit permission to test The author is not responsible for an...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Description This Nuclei template detects Apache Tomcat servers vulnerable to the TOCTOU race condition that allows remote code execution RCE. ⚠ Important note : This template should be used exclusively for educational purposes and in controlled environments with...

Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2022-45025

CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced VSCode, Atom Description The Mume markdown tool library was vulnerable to command injection due to use of spawn command with shell: true option. This could allow an attacker to achieve arbitary code execution by tricking...

CVE-2017-1000117

git-client-rce This PoC is only for educational purpose!!! Test GIT Repo for git-client-rce PoC CVE-2017-1000117 https://marc.info/?l=git&m=150238802328673&w=2 This CVE affects all the git clients v2.14.1 Execute following on test system to see PoC : $git clone --recursive...

CVE-2026-39987-Lab

CVE-2026-39987 — marimo Pre-Auth Terminal WebSocket RCE Lab Local-only Docker lab for reproducing and understanding CVE-2026-39987 in marimo. This project compares a vulnerable marimo service with a patched marimo service side-by-side, then demonstrates the difference using a least-harm proof...

PolyDrop

BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows, Mac, or Linux system as well as malicious source code in the form of the specific script interpreter of choice. Once both the malicious...

CVE-2023-22527

CVE-2023-22527 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE which tested and proven POC in vulnerable instance of confluence data center and servers. By this an attacker can execute arbitary code on vulnerable instance Installation: git...