CVE-2025-2783

Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploit This repository contains a full-chain exploit implementation for CVE-2025-2783. The vulnerability resides in Chromium's Ipcz communication layer, allowing an attacker to achieve sandbox escape and arbitrary code execution from a...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 Unauthenticated Remote Code Execution Uses Python 3 Running without Docker: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py Running with Docker:...

CVE-2024-23742

CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...

Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

ssh_poc2024

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2022-1388

CVE-2022-1388 BIG IP REST RCE On F5 BIG-IP 16.1.x versions prior to 16.1.2.2., 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Use the following...

CVE-2025-28346

Vulnerability Type SQL Injection Description A Time-Based Blind SQL Injection vulnerability was discovered in Ticket-Booking-App - 1.0 that allows an attacker to execute arbitrary SQL queries on the underlying database. The vulnerable parameter does not properly sanitize user-supplied input,...

CVE-2025-27363

CVE-2025-27363 on Chrome 113 Note: In chrome, this is not a new vulnerability, it was patched roll-up commit in March 2023. This PoC targets only chrome headless mode. However, I think it's an interesting read if you want to explore some internals and see the exploitation on PartitionAlloc when y...

FOXCMS-CVE-2025-29306-POC

FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...

CVE-2019-9978

CVE-2019-9978 - Social Warfare WordPress Plugin RCE system'cat /etc/passwd' ✅ Step 2 – Start a Python HTTP Server Use Python to serve your payload: python3 -m http.server 8000 This will make your payload.txt accessible at: http://:8000/payload.txt ✅ Step 3 – Run the Exploit python3 CVE-2019-9978....

CVE-2026-103508 Path traversal via logging configuration in P4Search

P4 Search formerly Helix Search allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search...

EUVD-2026-102074

P4 Search formerly Helix Search allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search...

CVE-2026-103508

P4 Search (formerly Helix Search) versions 2026.4.2 and earlier are vulnerable to a path traversal flaw within the logging configuration. An authenticated user with administrative privileges on the connected P4 Server can supply a crafted logging configuration to write or delete files outside the...

Remote-Code-Execution-RCE-Exploit-BlueKeep-CVE-2019-0708-PoC

BlueKeep Exploit Description This repository contains a Proof-of-Concept PoC exploit for the BlueKeep vulnerability CVE-2019-0708, which allows remote code execution on Windows systems via the RDP protocol. Directory Structure /python : PoC exploit for BlueKeep in Python. /java : PoC exploit for...

cve-2024-7646

CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...

CVE-2026-110936

A vulnerability has been identified in Siemens Software Center All versions. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches,...

EUVD-2026-102072

A vulnerability has been identified in Siemens Software Center All versions. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches,...

CVE-2026-110936

A vulnerability exists in Siemens Software Center (all versions) because the application loads dynamic-link libraries (DLLs) from an uncontrolled search path . This flaw allows an authenticated local attacker to place a specially crafted DLL in a searched directory, potentially leading to arbitra...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE This repository contains an exploit for CVE-2019-16278 in Nostromo Web Server 1.9.6, allowing remote code execution via a directory traversal vulnerability. The script uses pwntools to establish a reverse shell. For educational and authorized testing use only...