CVE-2017-0037

CVE-2017-0037 Microsoft Browser Memory Corruption Vulnerability This document is about CVE-2017-0037- Microsoft Browser Memory Corruption Vulnerability. It will first introduce what a Remote Code Execution RCE is and then go over through some technical specifics. What is Remote Code Execution? A...

PoC-CVE-2019-1003030

Jenkins 2.63 Script Security Sandbox Bypass PoC This project automates the creation and delivery of Groovy payloads to the Jenkins SecureGroovyScript validation endpoint used by Jenkins 2.63. The tool supports both interactive and one-shot execution. the exploit doesn't return output so you are...

CVE-2019-16663

CVE-2019-16663 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-16662...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Author Mohammed Idrees Banyamer Security Researcher GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Description CVE‑2026‑26335 is a critical unauthenticated remote code execution vulnerability in...

CVE-2024-34102

CVE-2024-34102 Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8, and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML...

weblogic2021

This project is intended for security research and authorized use only. Users are responsible and obligated to comply with local laws and regulations. weblogic2021 CVE-2021-1994, CVE-2021-2047, CVE-2021-2064, CVE-2021-2108, CVE-2021-2075, CVE-2019-17195, CVE-2020-14756, CVE-2021-2109 7 critical...

CVE-2018-8897

CVE-2018-8897 Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. KVA Shadowing should be disabled and the relevant security update should be uninstalled. This may not work with certain hypervisors like VMWare, which discard the...

CVE-2017-12149

CVE-2017-12149 Update of https://github.com/1337g/CVE-2017-12149 to work with python3 Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

CVE-2026-38526

CVE-2026-38526 - Krayin CRM RCE Description PoC script for critical vulnerability in Krayin CRM v2.2.x allowing authenticated RCE via unrestricted file upload. Usage Web shell python3 exploit.py -u http://target.com -e [email protected] -p password123 Reverse shell python3 exploit.py -u...

CVE-2022-24112

CVE-2022-24112 Apache APISIX batch-requests RCECVE-2022-24112 Place the target in url.txt python3 ApacheAPISIXRCECVE-2022-24112.py Cmd:...

CVE-2024-4577

CVE-2024-4577 Overview CVE-2024-4577 is a security vulnerability that affects PHP servers in the following versions: PHP 8.3.x 8.3.8 and earlier PHP 8.2.x 8.2.20 and earlier PHP 8.1.x 8.1.29 and earlier All versions prior to 8.0 Unsupported versions 7.x and 5.x This vulnerability is a remote code...

wp-file-manager

wp-file-manager WP File Manager 6.9 - Arbitrary File Upload leading to RCE usage: wp-file-manager.py -h -u URL -f FILE optional arguments: -h, --help show this help message and exit -u URL, --url URL URL of host to check will need http or https -f FILE, --file FILE File of URLS to check + Testing...

CVE-2024-0757-Exploit

CVE-2024-0757 Exploit Description The Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to arbitrary file uploads through insecure file uploads in a zip archive in all versions up to, and including, 4.3000000023. This makes it possible for unauthenticated...

bad-dicom

Bad-DICOM PoC of my handcrafted CVE-2019-11687's exploit tool. I've crafted this PEDICOM as a Proof of Concept for my college's capstone: "Detection and prevention of attacks based on vulnerabilities of DICOM files against medical management services ". What is a PEDICOM DoomDicom.dcm is a PEDICO...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...

CVE-2019-17571

CVE-2019-17571 / Apache Log4j 1.2.X Deserialization Remote Code Execution Vulnerability Vulnerability warning reference link: https://mp.weixin.qq.com/s/okU2y0izfnKXXtXG3EfLkQ 1. Vulnerability Description Apache Log4j is a Java-based open-source logging tool developed by the Apache Software...

CVE-2023-38646

CVE-2023-38646 PoC Description This is a Proof of Concept PoC script for exploiting Metabase, an open-source business intelligence and data analytics tool. Metabase allows users to visualize and interact with their data, making it a powerful platform for data analysis. This vulnerability,...

CVE-2024-49112-PoC

CVE-2024-49112-PoC CVE-2024-49112 LDAP RCE PoC and Metasploit Module Edit: links updated last 3 copies to go Link to Download: Contact Information You can reach me at: [email protected] please dont ask me if I can provide this for free, or if I can test your target, or how to add the module ...

CVE-2022-45701

CVE-2022-45701 Arris Router Firmware 9.1.103 - Remote Code Execution RCE Authenticated POC Exploit...

CVE-2019-5736

Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. Tested only on Debian 9. No attempts...