1332332 matches found
CVE-2017-8046
DISCLAIMER: This repository is supplementary to the VGS blog post, How to Avoid "Using Components with Known Vulnerabilities". It contains an application with a known security vulnerability namely, CVE-2017-8046, as well as the description of how to exploit it. Use the application at your own ris...
CVE-2025-55182
CVE-2025-55182.yaml CVE-2025-55182 poc nuclei -target url -t CVE-2025-55182.yaml 根据nuclei-template改造而来 核心代码： "then":"$1:proto:then","status":"resolvedmodel","reason":-1,"value":""then":"$B1337"","response":"prefix":"var...
CVE-2025-47577
CVE-2025-47577 - WordPress TI WooCommerce Wishlist for uploaded image path 💾 Saves valid uploaded image URLs to result.txt 💾 Saves valid wishlist URLs to resultwishlist.txt 🧠 Researcher Credit: Patchstack Database 🚀 Usage 1. Prepare your list.txt file with a list of target domains one per line,...
exploit-workshop
exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...
CVE-2026-87112
The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 5.3.0 . The vulnerability stems from unrestricted PHP deserialization via wrap_unserialize_static() calling unserialize() without an allowed_classes restriction, paire...
CVE-2026-87112 QA Assistants <= 5.3.0 - Unauthenticated PHP Object Injection to Remote Code Execution via 'raw_name' and 'dlevent_ver' Parameters
The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.3.0 via the 'dleventver' parameter. This is due to unrestricted PHP deserialization via wrapunserializestatic calling unserialize without an allowedclasses...
EUVD-2026-118966
The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.3.0 via the 'dleventver' parameter. This is due to unrestricted PHP deserialization via wrapunserializestatic calling unserialize without an allowedclasses...
PDFernetRemotelo
A Hacker In Capital Welcome to my GitHub repository! I am A Hacker In Capital , and here you will find all the scripts and tools I use in my streams and videos. Join me as we explore the fascinating world of cybersecurity and technology. About Me I am a cybersecurity enthusiast, sharing my...
CVE-2023-0297_Pre-auth_RCE_in_pyLoad
CVE-2023-0297: Pre-auth RCE in pyLoad The Story of Finding Pre-auth RCE in pyLoad TL;DR A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. You can find the report here and exploit code here. Details pyLoad is an OSS...
CVE-2024-10629
CVE-2024-10629 GPX Viewer = 2.2.8 - Authenticated Subscriber+ Arbitrary File Creation Description: The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and...
CVE-2025-10585-The-Chrome-V8-Zero-Day
CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today ⚔️🛡️ Google has released an out-of-band patch this week for CVE-2025-10585 , a serious type-confusion vulnerability in Chrome’s V8 JavaScript / WebAssembly engine. The bug is not theoretical — Google’s Threat Analysis Group confirmed...
CVE-2023-6553-RCE-Exploit
🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview Property|...
CVE-2022-34919
CVE-2022-34919 Contensis Content Management System prior to version 15.2.1.79 has a flaw in their 'Classic' interface that allows an unauthenticated user to upload and approve arbitrary files. By uploading an aspx file, it is possible to execute commands in the context of the web server. This...
cve-2025-63888-exploit
CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...
CVE-2022-22963
CVE-2022-22963 CVE-2022-22963 PoC Slight modified for English translation and detection of https://github.com/chaosec2021/Spring-cloud-function-SpEL-RCE/blob/main/SpelRCEPOC.py . By default whoami is executed on the target and a file vulnerable.txt is created with the URLs that are vulnerable. Mo...
pandorafms_7.44
Pandora FMS 7.44 CVE-2020-13851 Pandora FMS 7.44 CVE-2020-13851 RCE allows an authenticated user to achieve remote command execution via the events feature. Can be done with credentials or a PHP session cookie. Getting Started Executing program Using credentials python3 pandorafms7.44.py -t...
CVE-2021-40870
CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code...
OMIGOD_cve-2021-38647
OMIGODcve-2021-38647 CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. While executing payload Change HOST Command :Replace your command with Command here. such as id, whoami etc Credit https://github.com/horizon3ai/CVE-2021-38647 Follow us Vulnmachines YouTu...
freepbx-endpoint-sqli-rce
CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Summary FreePBX is the open-source web GUI for Asterisk PBX, widely deployed in enterprise telephony environments. The Endpoint Manager module exposes an AJAX handler at /admin/ajax.php that accepts a brand parameter a...