CVE-2020-23934

CVE-2020-23934 References 1 https://www.exploit-db.com/exploits/48636 2 https://github.com/vj0shii/PRTG-Network-MonitorCMS-Authenticated-Remote-Code-Execution/blob/master/PRTGCMS.py 3 https://stackoverflow.com/questions/12385179/how-to-send-a-multipart-form-data-with-requests-in-python 4...

CVE-2021-44228-Log4j-PoC-RCE

Apache Log4j CVE-2021-44228 GK7 PoC Steps 1. Compile Log4jRCE.java and move the .class file to a web server e.g., local PHP 1. cd src/main/java 2. javac Log4jRCE.java 3. Move the .class file to a web server or start a local PHP server, for example: php -S 127.0.0.1:8888 2. Start LDAP Server 1. gi...

CVE-2025-55182-React2Shell-Lab

CyberSec Blog CTF - React2Shell PoC This repository provides a vulnerable CTF Capture The Flag environment based on a cybersecurity blog using Next.js and React Server Components. CVE-2025-55182 : Pre-authentication Remote Code Execution RCE vulnerability in React Server Components versions 19.0....

CVE-2022-30190_EXP_PowerPoint

CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-30190 on PowerPoint. Modify the suffix of the file to 'zip' and unzip the file, you can edit \ppt\slides\rels\slide1.xml.rels and replace to your vps ip:port like this, then compress them as the same way and change the suffix to 'ppsx'. The...

CVE-2025-55349

CVE-2025-55349 — pm2 Arbitrary Code Execution via postinstall Discoverer : Golden Ticket Labs Vendor : Unitech pm2 Date Assigned : August 20, 2025 MITRE Description An issue in the lib/API/Modules/NPM.js component of Unitech PM2 v5.4.2 allows arbitrary code execution by installing packages with...

CVE-2024-53900

CTF Challenge - Mongoose RCE CVE-2024-53900 Challenge Overview This Capture The Flag CTF challenge is based on CVE-2024-53900, a vulnerability in Mongoose that allows Remote Code Execution RCE due to improper use of the $where operator in MongoDB queries. Your objective is to exploit this...

CVE-2021-21110

CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit...

OHTS

OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...

Laravel-8.4.2-rce-CVE-2021-3129

Laravel-8.4.2-rce-CVE-2021-3129 exploit.py tested use python3,and only working with phpggc . first docker-compose up port on 8888 at 127.0.0.1 generate key first...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE. POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host Content-type:...

EvilSunCheck

EvilSun Vulnerability Checker CVE-2020-14871 This is a little Python script to detect the "EvilSun" vulnerability CVE-2020-14871 on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module PAM pamunixauth when handling keyboard-interactive authentication in...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md CVE-2025-60787 Detection: motionEye RCE via Config Injection Unauthenticated Remote Code Execution in motionEye Still Images - Image File Name Example PoC payload: $touch /tmp/test.%Y-%m-%d-%H-%M-%S When motion restarts, the shell command executes and creates /tmp/test. Detection Covera...

CVE-2019-1010174

CVE-2019-1010174 CImg Library v.2.3.3 - command injection CVE-2019-1010174 Detail Modified This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided. Description CImg The CImg Library v.2.3...

exploit-CVE-2015-8351

Gwolle Guestbook WordPress Plugin RFI Exploit This Python script exploits a critical Remote File Inclusion RFI vulnerability in the Gwolle Guestbook WordPress Plugin, which can be exploited by a non-authenticated attacker to include a remote PHP file and execute arbitrary code on the vulnerable...

cve-2025-55182

🛡️ React2Shell CTF 🚀 Welcome to React2Shell-CTF , a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell is a critical vulnerability affecting React-based applications. This repository provides a safe, locally deployable Capture The Flag CTF challenge to...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Technical Analysis A technical root cause analysis of the vulnerability, indicators of compromise, and internet exposure can be found on our blog: https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise...

CVE-2026-110746 CVE-2026-110746

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

EUVD-2026-102075

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-110746

A local privilege escalation vulnerability exists in TotalAV that allows an unprivileged local user to execute arbitrary code as NT AUTHORITYSYSTEM . The root cause is the ability for an attacker to forge the gRPC IPC authentication token by loading IPC.dll and abusing the SYSTEM service within t...

CVE-2024-25466

CVE-2024-25466 Description for CVE-2024-25466 Suggested description Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component. Vulnerability Type...