CVE-2021-41773---Apache-Path-Traversal---RCE

CVE-2021-41773 — Apache Path Traversal & RCE Internship Task: ITSOLERA PVT LTD — Offensive Security Intern: Areeba Zehra Jafri Team Lead: Muhammad Ahsan Ayaz Date: March 18, 2026 Overview Research and exploitation of CVE-2021-41773 — Path Traversal and Remote Code Execution vulnerability in Apach...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

CVE-2023-39593

MariaDB 10.5 Authenticated Code execution-sysexec This guide provides detailed instructions to exploit a User-Defined Function UDF vulnerability in MariaDB on a remote server. These steps include downloading and executing malicious code on a vulnerable database system. Warning: This document is f...

CVE-2022-42889-Analysis

CVE-2022-42889 Text4Shell Report A repository that organizes an analysis report for Apache Commons Text CVE-2022-42889 and attack demonstration materials based on a closed test environment. Documents CVE-2022-42889 - Vulnerability Analysis Report Repository Structure CVE-2022-42889-Report/ ├─...

CVE-2020-8840

CVE-2020-8840 Environment jdk 8u161 windows10 1903 Procedure 1.Create a java file named Exploit.java with code you wanna run in it & compile it 2.Create a http server using python or other tools at the same dir of class file 3.Create a ldap server using marshalsec: java -cp...

CVE-2026-88772

A memory overflow vulnerability (CWE-119) in the DTLS record handling routine on UDP/443 allows unauthenticated Remote Code Execution (RCE) or Denial of Service (DoS) in Citrix NetScaler ADC and NetScaler Gateway . The flaw is triggered by processing malformed DTLS packets; notably, DTLS is enabl...

CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service...

EUVD-2026-87959

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service...

CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service...

CVE-2025-46157

CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Remote Code Execution and Privilege Escalation Summary A critical vulnerability was discovered in Timetrax V1 2025 that allows authenticated users to bypass file upload restrictions and achieve remote code execution RCE. The issue exists in the Lea...

CVE-2026-58138

🚨 CVE-2026-58138 — 未认证远程代码执行 🔥 Conductor 中的严重未认证远程代码执行漏洞 受影响版本：3.21.21 → 3.30.2 📌 概述 CVE-2026-58138 是一个影响 Conductor / Orkes Conductor 的严重未认证远程代码执行（RCE）漏洞。 该漏洞存在于应用程序对通过 GraalVM 评估的用户可控脚本表达式的处理中。不安全的评估器配置可能会将主机功能暴露给攻击者控制的表达式。 在易...

CVE-2025-8088-WinRAR-PathTraversal-PoC

CVE-2025-8088 WinRAR Path Traversal Exploit PoC A Proof-of-Concept exploit demonstrating the WinRAR path traversal vulnerability CVE-2025-8088 affecting versions ≤ 7.12. Vulnerability Details CVE ID : CVE-2025-8088 CVSS Score : 8.4 High Affected Versions : WinRAR ≤ 7.12 Patch Version : Fixed in...

CVE-2021-1675

🖨️ CVE-2021-1675 — PrintNightmare Windows Print Spooler RCE/LPE 类型： 概念验证 — 模拟（非功能性） CVE： CVE-2021-1675 + CVE-2021-34527 CVSS： 7.8（LPE）/ 8.8（RCE） 别名： PrintNightmare 已修补： 2021年6月/7月 — KB5004945 已加入 CISA KEV： 2021年7月 ⚠️ 此 PoC 的载荷明确为虚构且非恶意 — 仅为 4 字节的 DCE/RPC 头，后跟 ASCII...

CVE-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution Exploit CVE-2023-4220 Overview This repository contains a Bash script that exploits an unauthenticated remote code execution RCE vulnerability in Chamilo LMS via arbitrary file write. The vulnerability is identified as CVE-2023-4220. This exploit...

go-get-rce

This repository does not have a README...

CVE-2024-2044

PoC CVE-2024-2044: pgAdmin 4 认证后 RCE Linux/POSIX 本仓库包含针对 CVE-2024-2044 的 Proof of Concept PoC 脚本，该漏洞是一个严重漏洞，结合了 认证后路径遍历 和 不安全反序列化 ，影响运行在 Linux/POSIX 环境下的 pgAdmin 4 （8.3 及以下版本）。 !WARNING 免责声明： 本代码仅供教育、安全研究和授权的渗透测试（ authorized pentesting ）目的使用。未经书面许可，将本代码用于攻击目标是非法行为，违反法律。 漏洞描述 在 Linux 环境下以服务器模式运行的...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 File Upload Vulnerability Analysis Vulnerability Location Vulnerability Location: ht-contactform/admin/Includes/Services/FileManager.php Key Function: tempfileupload 1. Main Vulnerability Point: tempfileupload function Line 63 public function...

CVE-2024-27766

CVE-2024-27766 MariaDB v11.1 RCE via UDF — modified PoC based on Ant1sec-ops/CVE-2024-27766. Overview | ---|--- Affected| MariaDB v11.1 Fixed in| 10.5.25 / 10.6.18 / 10.11.8 / 11.0.6 / 11.1.5 / 11.2.4 / 11.4.2+ Type| RCE via User-Defined Function UDF MariaDB v11.1 allows an attacker with sufficie...

CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...