SMBGhost

SMBGhost Batch test CVE-2020-0796 - SMBv3 RCE...

CVE-2025-32433_PoC

CVE-2025-32433Erlang-OTP This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running...

packages_apps_settings_AOSP10_r33_CVE-2021-0481

This repository does not have a README...

CVE-2026-77871

The Post Snippets – Custom WordPress Code Snippets Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 4.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-110185

The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.31.0 via the 'image any body field referenced by the ImageHelper node's mix tag' parameter...

CVE-2026-111120

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.8. This is due to missing or incorrect nonce validation on the condtextupdatetmpl function. This makes it possible for unauthenticated attackers t...

CVE-2026-109218

The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 9.1.2 via the addmessage function. This is due to an incomplete extension blacklist that fails to detect dangerous extensions when a trailing dot causes the extension-derivation...

CVE-2026-109384

The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. This is due to insufficient file type validation due to the absence of a dangerous-extension denylist in the...

CVE-2023-4636

CVE-2023-4636 The vulnerability in the limelight is an unauthenticated remote code execution RCE issue stemming from insufficient controls on file paths occurring during image processing via Imagick. It enables adversaries to supply files via FTP, leading to local file inclusion and remote code...

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Exploit This works by exploiting the PHP filter parameter which allows you to use the system...

CVE-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability Installation Instruction: Download using git Requires git: git clone https://github.com/7heKnight/CVE-2020-0688 Download Zip File: https://github.com/7heKnight/CVE-2020-0688/archive/refs/heads/main.z...

cve-2024-4577

CVE-2024-4577 Vulnerability Test Script This Python script is a simple Proof of Concept PoC tool for diagnosing the latest PHP vulnerability CVE-2024-4577. ⚠️ This tool is provided for security assessment purposes and should only be used on systems you own or targets with prior authorization. 📌...

struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 A realistic scenario where a reference project for a framework is deployed on a container but with terrible consequences. To familiarise yourself look at the code and compile it. Also...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

CVE-2024-2054

CVE-2024-2054 Artica-Proxy administrative web application insecure deserialization RCE An exploit proof of concept for ARTICA PROXY Administrative web application CVE-2024-2054 Blog Post More details here:...

CVE-2021-41653

CVE-2021-41653 TP-Link TL-WR840N EU v5 Remote Code Execution Reference: https://k4m1ll0.com/cve-2021-41653.html...

CVE-2025-32433

CVE-2025-32433 – Erlang/OTP SSH RCE Vulnerability 📌 Summary CVE-2025-32433 is a remote code execution RCE vulnerability affecting the Erlang/OTP SSH daemon. The root cause is improper handling of pre-authentication SSH channel requests which can be crafted by an attacker to cause arbitrary comman...

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 Exploitation tool written in Python 3 compatible with lists of URL/IPs. This download includes a list of over 334,300 potentially vulnerable hosts according to shodan.io and personal scans. This tool is NOT free to prevent abuse. As of now patches are being appli...

TryHack3M-Bricks-Heist

target:10.201.6.98 enumeration nmap -A 10.201.6.98 since there is a wordpress with name "brick by brick" and the name of this room is brick it is probably where we can find vulnerability so lets enumerate wordpress wpscan --url https://bricks.thm --disable-tls-checks running with tls-checks wont...