Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-

Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post- I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...

cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC consider this to chain CVE-2019-5418! Pairs lovely with CVE-2019-5418! POC Screenshot 🚨 Warning This repository contains a proof-of-concept PoC exploit demonstrating remote code execution RCE in Ruby on Rails applications via...

CVE-2019-0193

CVE-2019-0193 Solr DataImport Handler RCE RCE-Vuln jdbc D:\CVE\CVE-2019-0193\solr-7.7.2\server\solr-webapp\webapp\WEB-INF\lib\mysql-connector-java-5.1.48.jar dataSource name="fromMysql" type="JdbcDataSource" driver="com.mysql.jdbc.Driver" url="jdbc:mysql://localhost:3306/mysql"...

SpringCloudFunction-Research

SpringCloudFunction-Research CVE-2022-22963 research Environment vulfocus/spring-cloud-function-rce:latest Cause Parsing issue of the spring.cloud.function.routing-expression parameter in the Request Header, leading to injection Payload attacks. Reference...

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 Remote Code Execution via Profile Picture Upload Description A Remote Code Execution RCE vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 webmin written in python3 Usage: python CVE-2019-15107.py https://172.16.20.134:10000 whoami...

CVE-2023-0669-Analysis

CVE-2023-0669 This Repo contain the pcakages and scripts used in this Analysis https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-goanywhere The vulnerable version of GoAnywhere for Linux https://www.dropbox.com/s/j31l8lgvapbopy3/ga703linuxx64.sh?dl=0...

CVE-2015-0057

CVE-2015-0057 Exploitation on 32-bit and 64-bit Systems Author: Aaron Adams Translation: 55-AA Translator's Note: Some parts of this article are freely translated. Please refer to the original text for any questions. Terminology: Primitive: Similar to a functional function, it is a collection of...

CVE-2026-25253-research

CVE-2026-25253 Proof of Concept One-click RCE on OpenClaw via Cross-Site WebSocket Hijacking. DISCLAIMER: This code is provided for authorized security research and educational purposes only. Use of this code against systems without explicit written permission is illegal and unethical. The author...

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ Overview CVE-2026-16723 is a Remote Code Execution RCE vulnerability in Fastjson 1.x 1.2.68 – 1.2.83. When Fastjson parses attacker-controlled JSON, a crafted @type value is turned into a class-resource lookup inside...

CVE-2019-19369

CVE-2019-19369 - FusionPBX = 4.5.10 Authenticated RCE Authenticated attackers can use PHP-Editor function in FusionPBX versions = 4.5.10 to edit one of the existing PHP pages to insert a PHP payload. By navigating to the changed file we are able to gain a shell as www-data. Discovered by...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE via SQL Injection SQL injection vulnerability in BigAnt Messenger causes RCE vulnerability. Follow the steps to exploit. Usage: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this help message and exit -r, --rhost RHOST...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

CVE-2019-0230-PoC

CVE-2019-0230 CVE-2019-0230 Exploit This is CVE-2019-0230 Exploit : usage python3 cve-2019-230.py example: python3 cve-2019-0230-poc.py pentest.com whoami Testing pentest.com! Command being passed for RCE: whoami 2020/10/22/...

CVEs

CVE-2022-2992: Remote Command Execution via Github import Information Description: This allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint. Versions Affected: all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 Version Fixed:...

CVE-2025-55182-React2Shell-RCE

CVE-2025-55182 - React2Shell Unauthenticated RCE in React Server Components CVE-2025-55182, also known as React2Shell , is a critical unauthenticated Remote Code Execution RCE vulnerability affecting React Server Components packages versions 19.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability ma...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE ⚠️ EDUCATIONAL PURPOSES ONLY — Use on real systems is prohibited. 📋 Project Overview / Project Overview Prepared as part of the BGT-Pentest-LAB cybersecurity final project. Xiaomi HyperOS System Updater...