CVE-2024-50498

CVE-2024-50498 WP Query Console body background-color: fff; color: 222; font-family: sans-serif; pre margin: 0; font-family: monospace; a:link color: 009; text-decoration: none; background-color: fff; a:hover text-decoration: underline; table...

CVE-2019-11395

CVE-2019-11395 Overview This Proof of Concept PoC demonstrates a Buffer Overflow vulnerability in MailCarrier 2.51, allowing remote attackers to execute arbitrary code via a long string. The vulnerability can be exploited using the following processes: SMTP RCPT TO POP3 USER POP3 LIST POP3 TOP PO...

CVE-2024-5084

Hash Form 9.9.1 file upload vulnerability Exploit The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for...

Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc Overview Vulnerability Name：Google Chrome Type Confusion Threat Type：Code Execution Exploitation Likelihood：High POC Status：Publicly Disclosed In-the-Wild Exploitation Status：Not Disclosed EXP Status：Publicly Disclosed Technical Details Status：Publicly Disclosed This...

CVE-2022-29464

CVE-2022-29464 Introduction Critical WSO2 vulnerability CVE-2022-29464 was found by Orange Tsai. The flaw is an unauthorised, unconstrained arbitrary file upload that enables unauthorised users to submit malicious JSP files to WSO2 servers and get Remote Code Execution RCE. Disclaimer: Educationa...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 Spring-Cloud-Function-SpELRCE Vulnerability Reproduction Requires Docker environment Method 1 to start the vulnerable environment git clone https://github.com/RanDengShiFu/CVE-2022-22963.git;cd CVE-2022-22963;bash Start.sh Method 2 to start the vulnerable environment...

docker_CVE-2014-6271.

dockerCVE-2014-6271. 1. docker build -t DOCKERIMAGENAME /path/to/dockerfiledirectory 2. docker run -it -d -p 8080:80 DOCKERIMAGENAME 3. verify execution with: docker ps 4. verify web server execution: http://localhost:8080 5. exploit vulnerability : curl -H "user-agent: :; ; echo; echo; /bin/bash...

CVE_2022_46395_Raven

Exploit for CVE-2022-46395 to run on FireTV 2nd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

CVE-2021-44228

Log4Shell Proof-Of-Concept This repository is a Proof-Of-Concept for CVE-2021-44228 vulnerability. It is derived from This Repo. In this repository I have made an example of a vulnerable application and a demonstration of how to exploit it. Proof-of-concept Components I have modified the upstream...

dotclaude-security

dotclaude-security किसी रेपो के स्थानीय .claude/ कॉन्फ़िग को स्कैन करें — settings.json हुक, MCP सर्वर परिभाषाएँ, env ब्लॉक, permissions.allow — उन RCE और API-key-exfiltration खतरों के लिए जो तब फायर होते हैं जब आप git clone करते हैं और Claude Code में एक अविश्वसनीय रेपो खोलते हैं। यह सटीक खतरनाक...

CVE-2017-1000486

CVE-2017-1000486 This is a PoC of CVE-2017-1000486 with some payloads useful to bypass blacklisting lexicographic checks on standard functions used to achieve RCE getClass, exec, etc.. and for retrieving primefaces secret through Padding Oracle in order to be less noisy possible on exploitation...

CVE-2019-5420

CVE-2019-5420 PoC डेवलपमेंट मोड में Rails 5.2.2.1, 6.0.0.beta3 में एक दूरस्थ कोड निष्पादन भेद्यता एक हमलावर को स्वचालित रूप से उत्पन्न डेवलपमेंट मोड सीक्रेट टोकन का अनुमान लगाने की अनुमति दे सकती है। इस सीक्रेट टोकन का उपयोग अन्य Rails आंतरिक के साथ संयोजन में एक दूरस्थ कोड निष्पादन शोषण तक बढ़ान...

CVE-2024-6387

Vulnerability Description CVE-2024-6387 exploit targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. Due to calling an async-signal-unsafe function in the SIGALRM handler, this vulnerability allows remote code execution as root. Vulnerability Summary Th...

CVE-2024-22514-Remote-Code-Execution

CVE-2024-22514: تنفيذ التعليمات البرمجية عن بُعد في Agent DVR معلومات الوصف يحتوي Agent DVR 5.1.6.0 من iSpyConnect.com على ثغرة أمنية تسمح بإعادة توجيه الملف الذي يتم تشغيله بواسطة أوامر التنبيه. يمكن أن يسمح هذا التعديل لوظيفة الأوامر بتشغيل أي ملف على النظام ضمن سياق صلاحيات البرنامج الجذر...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Description The WooCommerce Designer Pro plugin for WordPress, widely used especially in themes such as Pricom - Printing Company & Design Services, is vulnerable to arbitrary file uploads due to a lack of proper file...

Myesve

myesve CVE-2024-38475 Exploitation Framework – Version 1.0 Disclaimer: This tool is intended for authorized security testing, educational research, and legitimate bug bounty programs only. Do not use it against systems you do not own or lack explicit permission to test. The authors assume no...

CVE-2025-6389

CVE-2025-6389 Sneeit Framework 📡 Don't miss the next drop. Follow @KNxploited on Telegram — the definitive channel for freshly disclosed CVEs, working exploits, and elite security research. First to know. First to act. 🧠 Overview CVE-2025-6389 is a CVSS 9.8 Critical Remote Code Execution...

CVE-2025-32118

🚀 CVE-2025-32118 - WordPress CMP Plugin RCE Exploit 🔍 Title: WordPress CMP – Coming Soon & Maintenance plugin = 4.1.13 - Remote Code Execution RCE 🗓️ Published: 2025-04-04 🔐 CWE: CWE-434 - Unrestricted Upload of File with Dangerous Type 📊 CVSS: 9.1 CRITICAL —...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Overview CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 is vulnerable to authenticated arbitrary file uploads , allowing attackers with Subscriber+ privileges...