1330309 matches found
CVE-2025-49113-exploit
CVE-2025-49113 - Roundcube Remote Code Execution A proof-of-concept exploit for CVE-2025-49113, a remote code execution vulnerability in Roundcube Webmail. Description This exploit targets a deserialization vulnerability in Roundcube Webmail versions 1.5.0 through 1.6.10. The vulnerability allows...
cve-2023-38831
CVE-2023-38831 WinRAR Exploit PoC This repository contains a Python proof-of-concept PoC script for exploiting CVE-2023-38831, a vulnerability in WinRAR versions Arguments: : Path to the decoy file e.g., document.pdf, image.jpg. : Path to the payload file to execute e.g., script.bat, malware.exe....
CVE-2022-42889-text4shell
CVE-2022-42889-text4shell 🔥🔥🔥 Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit. Details📃 CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10 The vulnerability has been compared to Log4Shell since it is an...
cve-2025-55182
CVE-2025-55182 aka React2Shell Setup test enviornment kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up POC Payload 1. RCE with response in body POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever Content-Type: multipart/form-data;...
WSO2-CVE-2022-29464
WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Full technical analysis will be published at my blog post: https://mr-r3bot.github.io Usage python exploit.py -u...
CVE-2020-14144-GiTea-git-hooks-rce
CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...
CVE-2023-51214
Suggested description Cross Site Scripting vulnerability in Implementing an Activity Log in Your Web App Using PHP v.1 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product sourcecodester.com Affected...
CVE-2021-26855
CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...
CVE-2020-1947
CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction and Analysis Overview ShardingSphere is an open-source ecosystem under Apache, a set of distributed database middleware solutions composed of three independent frameworks: Sharding-JDBC,...
BPFDoor-controller-source
BPFDoor-controller-source Source code to recent BPFDoor's controller variant Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py Compile: $ apt install libssl-dev $ gcc -Wno-implicit-function-declaration...
CVE-2013-3664_BMP
Sketchup BMP Material RLE4 Heap Overflow - CVE-2013-3664 SketchUp fails to validate the input when parsing an embedded BMP RLE4 compressed texture. Arbitrary code execution is proved possible after a malicious texture or thumbnail or background image triggers a heap overflow. The issue can also b...
cve-2014-7920-7921_update
cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...
CVE-2019-0708-EXP-MSF-
CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Vulnerability exploit program for cve-2019-0708 要求msf版本在5.0.4以上 mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/ mkdir -p...
laravel-poc-CVE-2018-15133
Laravel Remote Code Execution when APPKEY is leaked PoC CVE-2018-15133 This repository contains a simple Laravel 5.6.29 application on PHP 7.2.10 with one basic noop route added in routes/web.php see Dockerfile and Proof of Concept exploit cve-2018-15133.php for CVE-2018-15133 that should...
CVE-2021-3129
CVE-2021-3129 Generate a phar package with custom commands: php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a enter the php command line environment $fp = fopen'php://output', 'w'; streamfilterappend$fp,...
CVE-2018-6574
CVE-2018-6574 CVE-2018-6574 go get RCE...
CVE-2022-20699
CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...
apache_normalize_path
CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apache HTTP Server Exploited On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the mo...
poc-cve-2025-55182
CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...