CVE-2021-44168

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -lz Run: %...

oieh-router-checker

OIEH Router Checker Un programme Windows qui vérifie en un clic si votre routeur est concerné par la backdoor chinoise ENDLESSDOORS Aucune installation requise · Aucun droit administrateur requis · Aucune transmission de données vers l'extérieur Qu'est-ce que c'est ? En août 2026, la société de...

CVE-2026-14483

CVE-2026-14483 — WPL Real Estate RCE Exécution de code à distance non authentifiée contre le plugin WordPress Realtyna WPL Real Estate Listing. Champ| Détail ---|--- CVE| CVE-2026-14483 Version affectée| Par défaut, le script n'exploite que les cibles exécutant WPL 5.2.0. Utilisez --force pour...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc إثبات مفهوم Proof-of-Concept يستغل ثغرة تنفيذ كود عن بُعد دون مصادقة عبر ميزة وحدة تحكم PHP في لوحة الإدارة ضمن MajorDomo Major Domestic Module. الثغرة تعرّض لوحة إدارة MajorDoMo وحدة تحكم لتقييم PHP عبر /admin.php. ونظرًا لغياب استدعاء exit بعد إعادة توجيه المصادقة ف...

cve-2020-0796

Identifying and Mitigating the CVE-2020–0796 flaw in the fly CVE-2020–0796, is pre-remote code execution vulnerability that resides in the Server Message Block 3.0 SMBv3 network communication protocol, which Microsoft will not address the issue as the part of the March 2020 Tuesday. Usage python3...

CVE-2025-31324

CVE-2025-31324 CVE-2025-31324، استغلال SAP POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

Exploit for Out-of-bounds Write in Apple Ipados

🛡️ CVE-2026-86950 — CoreGraphics Security Research...

f5_rce_poc

Usage python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates: Fixed some command execution...

PoC-CVE-2025-26529

PoC for CVE-2025-26529 – Moodle XSS to RCE Exploit This is a Proof of Concept PoC demonstrating the SSRF to XSS → XSS to RCE vulnerability chain in Moodle. Overview I’ve uploaded all the necessary files to demonstrate the full chain of exploitation: 1. SSRF to XSS 2. Grabbing the admin cookie 3...

CVE-2021-26295

CVE-2021-26295-POC استخدم DNSlog للتحقق من الثغرة CVE-2021-26295. الاستخدام poc: ضع الهدف في target.txt ثم شغّل python poc.py فقط. يجب أن تكون بيئة Jdk أقل من 12، وإلا فلن يتمكن ysoserial من توليد الحمولة بشكل صحيح exp: python exp.py https://baidu.com ثم ادخل إلى واجهة تنفيذ الأوامر بدون مخرجات...

Text4shell--Automated-exploit---CVE-2022-42889

Install maven - maven-linux //For automated hacking: 1../install.sh 2../exploit.sh 3.To remove the application use ./stopapp.sh //For manual hacking: 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080...

CVE-2023-51214

Suggested description Cross Site Scripting vulnerability in Implementing an Activity Log in Your Web App Using PHP v.1 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product sourcecodester.com Affected...

CVE-2020-1493

CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...

CVE-2020-17530

What's this This is a Simple test Project for S2-061 which can be used to analysis the detail of this vulnerability. How to use Step 1:Use IDEA import this project Step 2:setup tomcat Server Step 3:Use browser access...

CVE-2026-33017-Langflow-RCE

██╗ ██╗ ██████╗ ███████╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██║ ██║██╔═══██╗██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔═══██╗██╔════╝ ██║ ██║██║ ██║███████╗███████╗██║ ██║██║ ██║██║ ██║███████╗ ╚██╗ ██╔╝██║ ██║╚════██║╚════██║██║ ██║██║ ██║██║ ██║╚════██║ ╚████╔╝...

CVE-2021-22204

CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: bash CVE-2021-2204.sh "system'id'" happy.jpg Reverse shell bash...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

ThemeBleedPy

شكرٌ كبير إلى gabek على إثبات المفهوم PoC الأولي بلغة C، وعلى اكتشافه الفعلي لهذه الثغرة CVE. هذه إعادة كتابة لكوده بلغة Python، مع إعادة استخدام ملفات المراحل الخاصة به. لمشاهدة الـ PoC الأصلي، يمكنك الاطلاع على صفحته هنا: https://github.com/gabe-k/themebleed ThemeBleedPy إثبات مفهوم PoC باستخدا...

CVE-2024-4879

CVE-2024-4879 Exploit & PoC - Nuclei Template CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticate...