CVE-2023-26469-Jorani

CVE-2023-26469 Exploitation Tool Overview This is a Proof of Concept PoC exploit tool for Jorani 1.0.0, which allows attackers to achieve remote code execution through path traversal and log injection techniques. ⚠️ Warning: This tool is intended for security research and authorized testing only...

CVE-2019-12185

CVE-2019-12185 eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be...

OHTS

OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...

Spring-Data-Mongodb-Example

Spring-Data-Mongodb-Example CVE-2022-22980 environment Build docker environment docker build -t mongo . docker run -dit -p 6666:6666 mongo PoC ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...

CVE-2019-7609

CVE-2019-7609 exploit CVE-2019-7609kibana RCE on right way by python2 scripts snapshot usage python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit -u URL such as:...

CVE-2024-54262

CVE-2024-54262 Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce Overview This script exploits a vulnerability in the "Import Export for WooCommerce" WordPress plugin. The vulnerability allows unauthorized users to upload arbitrary files, leading to potential remote...

CVE-2026-41089

🚨 CVE-2026-41089 - Critical Windows Netlogon Remote Code Execution RCE ⚠️ A critical Windows Netlogon vulnerability allowing unauthenticated remote code execution on domain controllers. 📖 Overview CVE-2026-41089 is a critical vulnerability affecting the Windows Netlogon service. The flaw originate...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

CVE-2025-1974

DEMO https://youtu.be/3hYlHeaf2mQ What is CVE-2025-1974? CVE-2025-1974 IngressNightmare is a critical CVSS 9.8 unauthenticated Remote Code Execution vulnerability in the Kubernetes ingress-nginx admission controller. Attack Flow: 1. Upload : Send malicious shared library .so file to NGINX via HTT...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

CVE-2022-35411

rpc.py 0.6.0 - Remote Code Execution RCE Exploit fixed by: Liquidsky...

jsecret

jsecret simple and fast tool to detect sensitive data in the source code such as javascript files or others install go install -v github.com/raoufmaklouf/jsecret@latest Usage cat jsfiles.txt | jsceret echo http://test.tld/main.js | jsecret Big thank to https://twitter.com/medmahmoudi619 for helpf...

QuickResponseC2

Capabilities - Usage - Demonstration - Workflow Overview - TODO QuickResponseC2 QuickResponseC2 is a stealthy Command and Control C2 framework that enables indirect and covert communication between the attacker and victim machines via an intermediate HTTP/S server. All network activity is...

CVE-2023-37941

Exploitation of Pickle RCE within Superset's Default Cache Information Author Dinis Cruz Project Superset Description Apache's superset presents different options for caching, all of which based on Flask-Caching. A built-in cache is provided which serializes values for later retreival. This...

CVE-2020-9548

CVE-2020-9548: FasterXML/jackson-databind Remote Code Execution Vulnerability...

rails-PoC-CVE-2016-2098

A Proof of Concept of vulnerability: CVE-2016-2098 University project created by @alejandro-marting where we can check the vulnerability 2096 Using: rails 4.2.5.1 view has a vulnerable code app/views/poc/render1.html.erb !...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. Auth Bypass Add X-Forwarded-For header to bypass authentication, note that its value is not a fixed value. Brute Force Use Burp Intruder to fuzz test the values of hostid and localdataids. RCE The point of...

cve-2024-4577

CVE-2024-4577 Vulnerability Test Script This Python script is a simple Proof of Concept PoC tool for diagnosing the latest PHP vulnerability CVE-2024-4577. ⚠️ This tool is provided for security assessment purposes and should only be used on systems you own or targets with prior authorization. 📌...

HeimShell

HeimShell CVE-2023-51803 HeimShell is an exploit for CVE-2023-51803, leveraging an arbitrary file-upload vulnerability in LinuxServer.io Heimdall ≤ 2.5.6. It will auto-detect the target version and either warn of exploitability or remote fetch a php shell defined by SHELLURL ≤ 2.2.2 : Aribtrary...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...