1283940 matches found
CVE-2021-30461
Impacted Products VoIPmonitor 24.60 How to RCE python3 CVE-2021-30461.py -t ipaddress Browser shell: http://x.x.x.x/namrlblgel.php?a=whoami Reference https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...
CVE-2026-22241
CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...
CVE-2021-2109
Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network...
cve-2022-41352-zimbra-rce
This repository does not have a README...
atril_cbt-inject-exploit
CVE-2023-44452, CVE-2023-51698: Linux Mint Xreader/MATE Atril CBT File Parsing Argument Injection Remote Code Execution Vulnerability A Critical One-Click RCE/Command Injection Vulnerability Affecting Popular Linux Operating Systems with MATE, Cinnamon, and some Xfce desktop Environments. Affecte...
idaguides
IDA Guides Small plugin for IDA that adds indent guides to the decompiler view. Installation 1. Clone or download this repository 2. Extract it's contents to your IDA plugins directory 3. Restart IDA Tested With IDA 9.2, 9.3...
CVE-2021-24499
CVE-2021-24499 Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other wa...
CVE-2026-39987-Lab
CVE-2026-39987 β marimo Pre-Auth Terminal WebSocket RCE Lab Local-only Docker lab for reproducing and understanding CVE-2026-39987 in marimo. This project compares a vulnerable marimo service with a patched marimo service side-by-side, then demonstrates the difference using a least-harm proof...
CVE-2022-24112
CVE-2022-24112: Apache APISIX Remote Code Execution Vulnerability go run apisix-exploit.go -t -c Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-24112 https://lists.apache.org/thread/dzmgf0bwfmt58rfbz611gqo2b56qyqwq...
CVE-2024-6387
CVE-2024-6387 CVE-2024-6387 POC Currently being edited openssh CVE-2024-6387 - PoC π Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server ...
CVE-2023-30547
CVE-2023-30547 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException which can be used to esca...
CVE-2024-29272
CVE-2024-29272 This is a Proof-of-Concept for CVE-2024-29272, an unauthenticated arbritrary file upload vulnerability that leads to remote code execution on versions of VvvebJS -l -p in another terminal: nc -lvnp...
CVE-2021-21389
CVE-2021-21389 BuddyPress 7.2.1 - REST API Privilege Escalation to RCE PoC Full Affected version: 5.0.0 to 7.2.0 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint. How to use Docker git clone...
CVE-2020-14321
CVE-2020-14321 Course enrolments allowed privilege escalation from teacher role into manager role to RCE Maybe someone needs Python script, therefore, I have written it to exploit. How to use this PoC: How to use this PoC script Case 1. If you have vaid credentials: python3 cve202014321.py -u...
cve-2023-36845-scanner
Vulnerability Scanner for Juniper CVE-2023-36845 This vulnerability scanner can be used to scan Juniper firewalls to determine if they are vulnerable to CVE-2023-36845. Because this is built on top of go-exploit, this scanner has two phases: Target verification to ensure the target is a potential...
CVE-2021-21978
CVE-2021-21978 CVE-2021-21978 RCE exp Affected versions VMware View Planner Harness 4.X Similar to CVE-2021-21978, this vulnerability allows uploading arbitrary files without authentication, and achieving remote code execution by modifying the built-in py script. It is worth noting that commands...
CVE-2026-33824
π¨ CVE-2026-33824: Exploitation Analysis and Remediation π― Executive Summary CVE-2026-33824 is a critical vulnerability CVSS 9.8/10 in Windows' IKE Internet Key Exchange protocol that allows unauthenticated remote code execution. This is the "memory surgery" every elite attacker seeks: a Double Fr...
MMSkillRisk
Guizang Social Card Skill Β· Xiaohongshu Carousels / WeChat Cover Pairs δΈζ README An agent skill for Claude Code, Codex, and similar coding-agent environments. It generates Xiaohongshu / Rednote carousel images , Live Photo motion cards , and WeChat 21:9 + 1:1 cover pairs from articles, copy,...
CVE-2024-50379
Manual exploitation is troublesome, so I whipped up an exp.. Usage: shell.jsp is the shell file, ggsl.jsp is the name/path saved to the target server. ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp Disclaimer This tool is only intended for legally authorized enterprise...
CVE-2021-26084
CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection Install requirements pip3 install -r requirements.txt Run exploit USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py https://target.com 'ls -la'...