The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller, related to the improper assignment of permissions for critical resources, allows a intruder to execute arbitrary code.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability of the CrocoTime employee working time management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary codes.

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel-CVE-2015-2291

Intel-CVE-2015-2291 CVE-2015-2291 的 PoC 漏洞利用 利用存在漏洞的 Intel 驱动程序，通过纯数据攻击获取系统 shell。 该代码本身实现了驱动程序提供的更多“功能”，例如物理地址到虚拟地址的转换、物理内存映射（这两者结合 = 任意内核内存覆写），因此可用于在内核中执行任意代码。...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — 越界写入 → FSOP → 任意代码执行 目标： GNU Binutils（截至 HEAD 的所有版本）— objdump 环境： Debian 13 Trixie、glibc 2.41、x8664 影响： 任意代码执行 攻击途径： 由 objdump -g 处理的恶意构造 ELF 文件 ASLR： 已绕过（确定性 mmap 偏移量） 致谢 衷心感谢 bikini 的公开提及，以及他在这项发现上秉持的公平态度。他是个很棒的人，我有幸与他交流过，他自己也做出了一些了不起的发现。快去瞧瞧他的成果吧！ 漏洞 根本原因 — bfd/elf32-dlx...

CVE-2026-50522

CVE-2026-50522 PoC：SharePoint 反序列化 RCE 通过 SecurityContextToken Cookie 反序列化实现 SharePoint Server 未经身份验证的远程代码执行 针对本地部署的 Microsoft SharePoint Server 的 CVE-2026-50522 批量扫描漏洞利用工具。利用 /trust/default.aspx WS-Federation 端点中不安全的 BinaryFormatter 反序列化，通过精心构造的 SecurityContextToken cookie 实现未经身份验证的代码执行。 注意： 此项目...

Router-Exploit-Shovel

Router Exploit Shovel 针对无线路由器栈溢出类型的自动化攻击代码生成 Router exploits shovel 是一款针对无线路由器栈溢出类型的自动化攻击代码生成工具。该工具实现了漏洞利用的关键功能，能够自适应栈上数据填充的长度，生成 ROP 链，生成编码后的 shellcode，最终将它们组装成完整的攻击代码。用户只需将攻击代码附加到 POC 的溢出位置，即可完成远程代码执行的漏洞利用。 该工具支持 MIPSel 和 MIPSeb。在 Ubuntu 16.04 64bit 上运行。 安装 确保已安装 git、python3 和 setuptools。 从我们的...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx 生成 .docx 生成用于利用 CVE-2021-40444（Microsoft Office Word 远程代码执行） 1. 创建空白 docx 文件。 2. 在"插入/对象"菜单中添加"位图图像"对象。 添加对象...

nodejshell

NODEJSHELL - NodeJs反序列化反向Shell漏洞利用（CVE-2017-5941） 该漏洞利用工具会自动生成反向Shell有效载荷，该载荷先编码为十进制，再编码为Base64。之后，此有效载荷通过HTTP POST请求发送，该请求会序列化用户输入并将其存储在Cookie中。然后，我们通过GET请求访问即可获得RCE。 使用方法： python3 nodejshell.py lhost : 你的本地IP地址 lport : 你想要连接反向Shell的端口 之后你只需提供一些简单的信息： 通过 POST 发送有效载荷的参数名称。（仅在Cookie尚未设置时需要）。 通过 GE...

CVE-2023-4542

POC D-LINK-DAR-8000-10 上网行为审计网关存在远程命令执行漏洞 官方网站：http://www.dlink.com.cn/ 版本：D-LINK DAR-8000-10 查看登录页面。 构造URL：...

cve-2023-38831

CVE-2023-38831 WinRAR 漏洞利用 PoC 本仓库包含一个 Python 概念验证 PoC 脚本，用于利用 CVE-2023-38831，这是 WinRAR（版本 参数： ：诱饵文件的路径（例如 document.pdf、image.jpg）。 ：要执行的有效负载文件的路径（例如 script.bat、malware.exe）。 ：生成的恶意压缩包的名称（例如 poc.rar）。 示例： python exploit.py document.pdf script.bat poc.rar 现场演示 以下展示了该漏洞利用的实际操作演示： ⚠️ 警告：...

givewp-cve-2026-82222-rce-lab

CVE-2026-82222 — GiveWP 仅标记 RCE 验证实验室 用于在隔离的 Docker 实验室中复现和验证 CVE-2026-82222 的安全研究材料。 如需直接 RCE PoC 和 URL 扫描，请使用CVE-2026-8222-RCE.py 结论 状态：在所提供的实验室中已验证 GiveWP 4.16.5.1 允许最初未经身份验证的攻击者持久化一个 PHP 对象图，通过 GiveWP 会话处理将其复活，并以 WordPress Web 服务器用户身份 执行一个固定的标记命令。 测试阳性结果： GiveWP: 4.16.5.1 WordPress: 6.6.2 PHP...

POC-CVE-2018-10933

POC-CVE-2018-10933 使用RCE的LibSSH认证绕过漏洞利用 代码参考 YouTube视频https://www.youtube.com/watch?v=ZSWQjmfcn4g示例的Git仓库 漏洞更多信息 https://www.libssh.org/security/advisories/CVE-2018-10933.txt https://vulners.com/cve/CVE-2018-10933...