586768 matches found
CVE-2021-2109
CVE-2021-2109 Weblogic Server Remote Code Execution Vulnerability Reproduction and Analysis In January 2021, Oracle released a security update patch, including 329 new security patches in the Oracle product family. This announcement specifically mentioned the Oracle WebLogic Server security...
React2Shell-CVE-2025-55182
React2Shell CVE-2025-55182 A proof-of-concept exploit demonstrating a remote code execution vulnerability in Next.js applications through prototype pollution in the React server components rendering pipeline. β οΈ Disclaimer This tool is for educational and authorized testing purposes only...
CVE-2020-27955
CVE-2020-27955 Thanks https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...
CVE-2024-1212
CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...
CVE-2018-7600
CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...
CVE-2019-0708-EXP-MSF-
CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Vulnerability exploit program for cve-2019-0708 θ¦ζ±msfηζ¬ε¨5.0.4δ»₯δΈ mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/ mkdir -p...
react2shell-lab
React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. β οΈ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...
Log4jUnifi
Log4jUnifi Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more. Another Log4j on the fire: Unifi Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository automates the exploitation process. See the blog po...
SpringBreaker
SpringBreaker Exploit PoC for Spring RCE issue CVE-2011-2894...
Log4jCenter
Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote code execution and more. Blog post detailing exploitation linked below: How to exploit Log4j vulnerabilities in VMWare vCenter Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository...
CVE-2023-34040
CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36...
Ivanti-CVE-2025-0282
Ivanti-CVE-2025-0282 EjecuciΓ³n remota de cΓ³digo en Ivanti Gracias @Abdualhadi khalifa...
CVE-2003-0264-SLmail-5.5
CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 Buffer Overflow References https://vulners.com/cve/CVE-2003-0264 Vulnerability SLMail has no bounds checking when submitting a POP3 password. As a result, you can execute arbitrary code by submitting a long, malformed POP3 PASS to the SLMail server...
CVE-2021-41773-Apache-RCE
CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...
CVE-2016-3238-PoC
CVE-2016-3238-PoC Whitepaper for CVE-2016-3238/MS16-087 Proof Of concept. CVE-2016-3238 allows man-in-the-middle attackers to execute arbitrary code by providing a crafted print driver during printer installation, aka "Windows Print Spooler Remote Code Execution Vulnerability."...
CVE-2023-46604-LAB
CVE-2023-46604 β Apache ActiveMQ RCE OpenWire Protocol This repository documents a lab environment used to understand and detect the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The goal of this project: Understand how the exploit behaves at the protocol level Capture malicious OpenWir...
CVE-2023-46604
Technical Summary of the Attack: CVE-2023-46604 The script exploits an insecure deserialization vulnerability in Apache ActiveMQ CVE-2023-46604 to achieve remote code execution on the target server. Description of the Exploitation Process Vulnerability Target: The vulnerability resides in the...
CVE-2025-55182
CVE-2025-55182 POST /formaction HTTP/1.1 Host: localhost Content-Type: multipart/form-data; boundary=----Boundary Content-Length: 297 ------Boundary Content-Disposition: form-data; name="$ACTIONREF0" ------Boundary Content-Disposition: form-data; name="$ACTION0:0"...
CVE-2022-22965
POC Spring4Shell CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof Of Concept. The naming of this flaw is based on the similarities to the infamous Log4j LOG4Shell. Details about this vulnerability https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...
CVE-2025-49844
CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...