Dubbo-deserialization

अपाचे डब्बो डिसीरियलाइज़ेशन भेद्यता अनुसंधान इस रिपॉजिटरी में Apache Dubbo डिसीरियलाइज़ेशन भेद्यताओं से संबंधित अनुसंधान सामग्री, प्रूफ-ऑफ-कॉन्सेप्ट कोड और शोषण उपकरण शामिल हैं, मुख्य रूप से CVE-2020-1948 पर केंद्रित। रिपॉजिटरी संरचना निर्देशिकाएँ Hessian-Deserialize-RCE-master : डब्बो में हैसियन...

CVE-2025-47812-poC

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE-2025-47812 to run commands and get a reverse shell. For educational use only. Vulnerability Details This security vulnerability was publicly disclosed and detailed by RCESecurity...

CVE-2019-16663

CVE-2019-16663 Centreon v19.04 Remote Code Execution CVE-2019-16662 के लिए आधिकारिक शोषण कोड...

CVE-2022-39073

CVE-2022-39073 Firmware details: root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prerequisites requests pip install requests Command Injection The vulnerability is a shared command injection between the ztenetlinkdetect binary and the WATCHDOGSWITCH...

CVE-2023-51385

CVE-2023-51385 OpenSSH ProxyCommand RCE 1. जब आपका ProxyCommand इस प्रकार कॉन्फ़िगर किया गया हो: root@kitploit: Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. प्रमाण अवधारणा के लिए निम्नलिखित कमांड का उपयोग करें root@kitploit: git clone...

sqlpad-rce-exploit-CVE-2022-0944

SQLPad RCE Exploit This repository contains an exploit script for CVE-2022-0944 in SQLPad, a vulnerability that allows for Remote Code Execution RCE via the /api/test-connection endpoint. Overview The provided script exploit.py demonstrates how to exploit the RCE vulnerability in SQLPad. The scri...

CVE-2024-21633

MobSF Remote code execution via CVE-2024-21633 I have found an arbitrary file write in apktool and reported via github security advisory. I was aware that many projects were relied upon or dependent to apktool but after the publish of advisory and fix not many seem to be noticed or cared about it...

Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

Apache Superset pickle library code execution IBM : Apache Superset could allow a remote attacker to execute arbitrary code on the system, caused by the use of unsafe load method from the pickle library to deserialize data. By sending specially-crafted request, an attacker could exploit this...

CVE-2020-11978

CVE-2020-11978: Remote code execution in Apache Airflow's Example DAGs Information Description: This vulnerability allows RCE when Airflow's example DAGs are loaded, potentially unauthenticated with CVE-2020-13927 CVE Credit : xuxiang of DtDream security Versions Affected:...

CVE-2024-27956

Wordpress SQLI-2-RCE Exploit This Python script exploits CVE-2024-27956, a vulnerability in Wordpress that allows for SQL Injection leading to Remote Code Execution RCE. Features Multi-threaded Exploitation: Utilizes concurrent threads to exploit multiple Wordpress instances simultaneously. Dynam...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278 का शोषण करने के लिए सरल Python स्क्रिप्ट, एक पथ ट्रैवर्सल भेद्यता के कारण जो अनप्रमाणित RCE की ओर ले जाती है। Usage: python3 nostroSploit.py targetIP targetPort optional command to run इससे प्रेरित:...

CVE-2020-11179-Adreno-Qualcomm-GPU

My independent work from the poc created by P0 researcher Ben Hawkes Original article: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html My goal is to convert his poc to C, and continue where he left off and turn the poc into either a root shell, or a kernel r/w, a...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - تنفيذ الأوامر عن بعد RCE CVE-2021-4045 🔐 "PWNTAPO: كشف حقن الأوامر في كاميرات TP-Link Tapo C200 = v1.1.16 Build 211209" 🔓 اقرأ عن الثغرة من exploit db هذه ثغرة حقن أوامر تؤثر على جميع إصدارات البرامج الثابتة لكاميرات TP-Link Tapo c200 الأقل من 1.1.16 Build 211209 Rel...

CVE-2022-36804

CVE-2022-36804 Atlassian Bitbucket Server and Data Center - Command Injection Vulnerability CVE-2022-36804 In affected versions of Atlassian Bitbucket Server and Data Center a Command Injection Vulnerability exists in multiple API endpoints where an attacker with access to a public repository or...

CVE-2023-27524

CVE-2023-27524 Apache Superset प्रमाणीकरण बाईपास CVE-2023-27524 संदर्भ https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524 https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/...

CVE-2023-29360

CVE-2023-29360 एक्सप्लॉइट कोड पर ब्लॉग यहाँ पाया जा सकता है...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.0 RCE vulnerability This is a script to exploit CVE-2017-5638 - It allows an attacker to inject OS commands into a web application through the content-type header Apache Struts 2 is an open-source web application framework for developing Java EE web applications. It...

FortiWeb-CVE-2025-52970-Authentication-Bypass

🚨 FortiWeb Authentication Bypass → Remote Code Execution 📌 Overview This repository demonstrates an authentication bypass in FortiWeb that can be chained to achieve Remote Code Execution RCE. The exploit leverages a vulnerable endpoint to inject SQL payloads, upload a webshell, and execute comman...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT 反序列化 - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669是一个GoAnywhere MFT反序列化漏洞，由于反序列化一个任意攻击者控制的对象，在License Response Servlet中存在一个预先认证的命令注入漏洞。攻击者可以利用该漏洞在受影响的系统上执行任意代码，从而导致系统被完全控制。该漏洞影响版本为7.1.2之前，不包括7.1.2。 CVE-2023-0669 is a GoAnywhere MFT deserialization vulnerability that...

CVE-2017-8464-EXP

CVE-2017-8464-EXP Support x86 et x64 Juste pour test Fichier Lnk provenant de : https://github.com/rapid7/metasploit-framework/pull/8767 Merci à ykoster Petite modification, remplacement du fichier dll, correction du bug qui faisait planter explorer.exe. ykoster a corrigé ce bug POC : x86 : x64 :...