CVE-2019-11043-Docker

A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overview Item| Details ---|--- CVE ID| CVE-2026-34197 CVSS| 8.8 HIGH Vulnerability Type| Remote Code Execution RCE CWE| CWE-20 Improper Input Validation / CWE-94 Code Injection Affected Component| Apache ActiveMQ Classic - Jolokia JMX-HTTP Bridg...

CVE-2023-21939

JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK + Apache XML...

CVE-2021-25646

Apache Druid Remote Code Execution CVE-2021-25646 by j2ekim Usage python exp.py -u --url -c --command python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn" Vulnerability Reproduction Article https://www.adminxe.com/2109.html Disclaimer Any direct or indirect consequences an...

cve-2020-11060-poc

CVE-2020-11060 This script is a Python 3.x based exploit for CVE-2020-11060 in GLPI versions 0.85-9.4.5. Original implementation: 0xdreadnaught Python3 refactoring: n3rada The original PoC in ExploitDB is now deprecated since it used Python 2.x. The new version has been submitted, and a link will...

cacti-cve-2022-46169-exploit

CVE-2022-46169 PoC: Authentication Bypass and Remote Code Execution This repository contains a PoC for the CVE-2022-46169 vulnerability, which allows an attacker to bypass authentication and execute arbitrary code remotely on the affected system. This vulnerability affects Cacti, version 1.2.22,...

CVE-2022-41852

Remote Code Execution in JXPath Library CVE-2022-41852 Proof of Concept CVE-2022-41852 allows attackers to execute code on the application server. You can read more about this vulnerability here: https://hackinglab.cz/en/blog/remote-code-execution-in-jxpath-library-cve-2022-41852/ Note: I am not ...

CVE-2022-21907-Vulnerability-PoC

CVE-2022-21907 Description - POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. - create by antx at 2022-01-17, just some small fixes by Michele "[email protected]" Detail - HTTP Protocol Stack Remote Code Execution Vulnerability. - Similar to...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

CVE-2025-30406

CVE-2025-30406 ViewState Exploit PoC Overview This is a Proof-of-Concept PoC script demonstrating a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET applications. It uses ysoserial to generate a malicious ViewState payload and sends it to a user-specified URL to execute a provided...

glassworm-hunter

glassworm-hunter Detect GlassWorm supply chain attack payloads on your machine. Scans VS Code extensions, npm packages, Python packages, and git repositories. This scanner detects the attack technique itself - invisible Unicode variation selector payloads, GlassWorm decoder patterns, C2...

CVE-2026-39292

Title: CVE-2026-39292 – Arbitrary File Upload leading to RCE in Falco Solutions PHPPageBuilder v0.31.0 Summary: A file upload vulnerability in the pagemanager/pagebuilder module allows authenticated/unauthenticated attackers to upload arbitrary files resulting in remote code execution. Affected...

CVE-2024-23746

CVE-2024-23746 Miro Desktop 0.8.18 on macOS allows Electron code injection. PoC signature and version: tool used to explore the vulnerability: https://github.com/r3ggi/electroniz3r verify if is vulnerable: inject a Blind Shell: References...

codesnippets_CVE-2020-8417

This repository does not have a README...

CVE-2024-37032

CVE-2024-37032 Path traversal in Ollama with rogue registry server Learn from Probllama: Ollama Remote Code Execution Vulnerability CVE-2024-37032 – Overview and Mitigations Vulnerability environment docker run -d -v ollama:/root/.ollama -p 11434:11434 --name ollama ollama/ollama:0.1.33 Rogue...

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE Based entirely on https://github.com/dotPY-hax/gitlabRCE, which did not work for me and the HTML parsing stuff seemed cumbersome so I rewrote it in js. Usage Start a reverse shell handler in the usual way, then run this script with: TARGETURI="https://target"...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 Information Disclosure + RCE All-in-One This PoC writes a file to the target, here it writes phpinfo. If you need other functionality, modify it yourself. Do not use for illegal purposes...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

eximrce-CVE-2019-10149

eximrce Simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /root/lweximtest. Output will be slow depending on server's reply and not knowing how to properly use python's socket module. Would love a lesson on how to speed it up. Only...

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities. Aspect| Information ---|--- Tool name| IaC Scan Runner Docker image| xscanner/runner PyPI package| iac-scan-runner Documentation| docs Contact us| [email protected] Table of Contents Description Runnin...