CVE-2023-0297

pyloadCVE-2023-0297poc A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. use Usage of CVE-2023-0297poc.exe: -f string fileName:IP.txt -u string example:http://127.0.0.1:8080...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Proof-of-Concept Overview This repository contains a Python script that demonstrates a proof-of-concept PoC exploit for CVE-2023-38831. This exploit leverages a vulnerability in specific file-processing mechanisms to execute a reverse shell payload through a malicious RAR...

CVE-2022-25064

CVE-2022-25064 TP-LINK TL-WR840N RCE via the function oalwan6setIpAddr POC POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip,...

cve-2019-11447

CVE-2019-11447 CutePHP Cute News 2.1.2 RCE PoC Target : 2.1.2 This PoC script is based on a simple implementation of the original exploit by BobbySox. The original exploit is an MSF module by Akuss. This script needs the target ip address or domain along with credentials and it will automatically...

PrintNightmare

PrintNightmare Here is a project that will help to fight against Windows security breach PrintNightmare! CVE-2021-34527 You have to know that a patch has been released by Microsoft against this breach but is not fully functional and fight only RCE Remote code execution while LPE Local privilege...

CVE-2024-22274

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the...

cve-2021-41773

Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...

CVE-2021-22204

CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...

CVE-2023-38831

CVE-2023-38831 CVE-2023-38831 is an RCE in WinRAR 6.23 Reference by https://github.com/z3r0sw0rd/CVE-2023-38831-PoC Read up by Google's TAG at: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ Download the latest vulnerable version: 6.22 for...

Mass-CVE-2025-3248

Langflow CVE-2025-3248 Exploit Tool Overview This tool exploits the critical Remote Code Execution RCE vulnerability CVE-2025-3248 found in Langflow versions prior to 1.3.0. The vulnerability exists in the /api/v1/validate/code endpoint which improperly executes user-supplied code without...

CVE-2025-49619

CVE-2025-49619 PoC This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener nc -lvnp 2. Run the exploit python3 exploit.py -u "http://:" -k "" -i -p : Skyvern server IP : Skyvern server port : Your...

CVE-2019-15107

CVE-2019-15107 This repo contains a small script in bash to exploit CVE-2019-15107 without using metasploit. Use is pretty straightforward, just download and execute, no dependencies root@kali: ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a' Error - Perl execution failed Your password has...

CVE-2025-54123-Poc

CVE-2025-54123 Exploit Hoverfly Authenticated Middleware Command Injection RCE | CVSS 9.8 CRITICAL Vulnerability Hoverfly -u -p -c --shell SHELL -t, --target - Hoverfly API endpoint required -u, --username - Admin username required -p, --password - Admin password required -c, --command -...

CVE-2026-38192

pluck-CMS-4.7.20-code-injection-vulnerability In admin.php, the moduleaddtosite function iterates through the entire $POST array, splits the user-controllable parameter names using explode'|', ... and directly concatenates them into data/settings/themes//moduleconf.php. This file will subsequentl...

CVE-2023-38408

CVE-2023-38408 Slide and source code for CS-782 attack presentation...

CVE-2025-55182-golang-PoC

CVE-2025-55182 React Server Components RCE - Go PoC ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY ⚠️ Description CVE-2025-55182 also known as CVE-2025-66478 is a critical Remote Code Execution vulnerability in React Server Components Flight protocol. This tool is a Go implementation of the PoC for...

CVE-2024-37054

CVE-2024-37054 — MLflow Pickle Deserialization RCE Proof-of-concept exploit for a critical pickle deserialization vulnerability in MLflow Tracking Server, enabling authenticated remote code execution. ⚠️ For educational and authorized security testing only. Do not use against systems you do not ow...

CVE-2017-8570

Usage: After downloading the script, modify attackip to the IP of Kali, LPORT to the port that msf will listen on, and DIR to any empty directory Give the script 777 permissions chmod 777 auto Then run the script ./auto Then find the Invoice.ppsx file in the DIR+Office8570 directory and send it t...

CVE-2026-108963

The databasement software versions prior to 1.8.2 is vulnerable to remote code execution due to argument injection (CWE-88). The application executes commands such as mariadb-dump using a database name that can be supplied by any authenticated user . While the application uses quoting to prevent ...

EUVD-2026-97123

databasement before 1.8.2 allows remote code execution because it runs certain commands e.g., mariadb-dump with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command...