CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd CVE-2021-44228-log4jVulnScanner-metasploit...

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

CVE-2023-22527

CVE-2023-22527 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE which tested and proven POC in vulnerable instance of confluence data center and servers. By this an attacker can execute arbitary code on vulnerable instance Installation: git...

CVE-2020-8254

CVE-2020-8254: Zip Slip in Pulse Secure VPN Windows Client A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here...

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...

CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

weblogic_wls_wsat_rce

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....

WSUS-CVE-2025-59287-RCE

WSUS-CVE-2025-59287-RCE CVE-2025-59287 is a critical CVSS 9.8 remote code execution vulnerability affecting ALL Microsoft Windows Server Update Services aka WSUS, and has been exploited in the wild. The vulnerability exploits insecure deserialization in the GetCookie endpoint, allowing...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

Exploit for CVE-2021-41773 and CVE-2021-42013 Path traversal attack and RCE in Apache/2.4.49-2.4.50 Features - Take a list of urls - Works for both CGI and non-CGI - Works for Apache/2.4.49 - 2.4.50 Usage $ git clone https://github.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit $...

WSUSResponder

🧰 WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT 🎯 Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...

CVE-2018-5955

CVE-2018-5955 An exploit for CVE-2018-5955 GitStack 2.3.10 Unauthenticated RCE Exploit: GitStack 2.3.10 Unauthenticated Remote Code Execution Date: 18.01.2018 Software Link: https://gitstack.com/ Exploit Author: Kacper Szurek Original Exploit: https://www.exploit-db.com/exploits/43777 Website:...

CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

CVE-2022-41924

CVE-2022-41924 POC 👉 https://oalieno.tw/posts/tailscale-rce...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

CVE-2021-33909

CVE-2021-33909 Exploit code for CVE-2021-33909,Just a dump of removed https://github.com/AmIAHuman/ repo Sequoia CVE-2021-33909 Building gcc exploit.c -o exploit Running "mkdir dir;./exploit $pwd/dir". chmod +x exploit ./exploit One-Liner gcc exploit.c -o exploit;chmod +x exploit;./exploit Credit...

CVE-2021-2109

CVE-2021-2109 Weblogic Server Remote Code Execution Vulnerability Reproduction and Analysis In January 2021, Oracle released a security update patch, including 329 new security patches in the Oracle product family. This announcement specifically mentioned the Oracle WebLogic Server security...

CVE-2026-23744-PoC

CVE-2026-23744-PoC MCP RCE Exploit Linux PoC to exploit /api/mcp/connect for remote command execution. Requirements pip install requests Usage python3 exploit.py Example: python3 exploit.py mcp.something.com Configuration edit in script attackerip = "YOURIP" port = 4444 Listener nc -lvnp 4444...

cobaltstrike_swing_xss2rce

This repository does not have a README...

CVE-2026-32746

🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...