CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 A streamlined Bash exploit for CVE-2023-27350. This script automates authentication bypass, environment preparation, and command injection via the PaperCut printer scripting engine. Visual Proof Basic rce: Triggering a reverse shell: Quick Start Clone the...

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 Poc POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accept:...

CVE-2019-18935

CVE-2019-18935 Proof-of-concept exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX allowing remote code execution. Description Telerik UI for ASP.NET AJAX is a widely used suite of UI components for web applications. It insecurely deserializes JSON objects in a...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary Field| Detail ---|--- CVE ID| CVE-2021-41773 Affected Software| Apache HTTP Server...

MoodleExploit

Moodle Exploit Exploit Title: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/archive/v3.4.1.zip Version: 3.4.1 Possibly 3.5.0 and maybe even...

cve-2021-42013-docker-lab

CVE-2021-42013 Introduction It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not...

connectwise-automate-AiTM-rce

ConnectWise Automate Adversary-in-the-Middle Remote Code Execution Table of Contents Background Timeline Thoughts and Learnings Responsible Disclosure PoC Code Report Provided to ConnectWise Summary Vulnerable Configuration Impact Technical Details 1. HTTP Transport 2. Insufficient Protocol...

CVE-2022-22954

CVE-2022-22954 Attention Please use this at your own risk. This repo is meant only for educational purposes and we are strictly against all illegal intentions and we would not be responsible of any illegal activities associated with this repo. Be ethical! Example python3 CVE-2022-22954.py -t...

CVE-2021-21425

CVE-2021-21425 GravCMS Unauthenticated Arbitrary YAML Write/Update leads to Code Execution CVE-2021-21425 Reference : https://pentest.blog/unexpected-journey-7-gravcms-unauthenticated-arbitrary-yaml-write-update-leads-to-code-execution/...

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

CVE-2019-11043 1. Vulnerability Description When Nginx processes requests containing %0a with fastcgisplitpathinfo, it causes PATHINFO to be empty due to the newline character \n. PHP-FPM has a logic flaw when handling an empty PATHINFO. An attacker can craft a request to achieve remote code...

CVE-2020-13756-env

CVE-2020-13756 Vulnerable Environment Vulnerable test environment for CVE-2020-13756 - Sabberworm PHP CSS Parser Remote Code Execution. Vulnerability Details Field| Value ---|--- CVE| CVE-2020-13756 Product| Sabberworm PHP CSS Parser Vulnerable Versions| getSelectorsBySpecificity' ' . $GET'n'; //...

CVE-2026-4883

CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...

CVE-2019-15029

CVE-2019-15029 The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit Module I wrote a simple Metasploit module to exploit this issue fusionpbxservices.rb, you just have to download it and copy it into metasploit modules directory...

CVE-2026-11417-AWS-CDK-RCE

Supply Chain Command Injection in AWS CDK's NodejsFunction CVE-2026-11417 Author: Hesham Ashraf @HeshamASH Date: June 10, 2026 Severity: High CVSSv3.1: 7.3, CVSSv4: 7.0 CWE: CWE-78 — Improper Neutralization of Special Elements used in an OS Command OS Command Injection Affected Package: aws-cdk-l...

struts_rest_rce_fuzz-CVE-2017-9805-

This repository does not have a README...

CVE-2020-26217

Description XStream can be used for Remote Code Execution Influence Xstream com.thoughtworks.xstream xstream 1.4.13 How to use 0 text/plain 0 -1 1 cmd...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – XPC Service NSKeyedUnarchiver Deserialization Attack macOS/iOS simulation Program Code Python simulation !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess, socketserver, struct Mach message...

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – Jenkins Pipeline Shared Library Code Execution via @Grab Program Code Groovy pipeline // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Jenkins Pipeline Shared Library Remote Code Execution Overview A Jenkins pipeline loa...

CVE-2025-48384

CVE-2025-48384 PoC Notes This repository was created for security education purposes. Please do not misuse it. This vulnerability requires including \r in directory names, so Linux/Unix systems are affected. The following Git versions are affected: v2.43.x series - less than v2.43.7 v2.44.x serie...

CVE-2026-115946

XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected versions compile a bundled brotli into static archives that dependent XS modules link against at build time, rather than using the system library. The bundled copy, 1.0.7 or...