CVE-2025-55182-POC

CVE-2025-55182-POC React2Shell POC Usage: sudo python3 hehe.py -t -c Example: ❯ sudo python3 hehe-t 12.05.12.05 -c "id" . .. . | \ | | / \ / || || | | | / || | | | | || | | | | | | | | / ^ \ | ,----'---| |----| | | | | ----| || | | | | | | | | / | | / /\ \ | | | | | | | | \ \ | | | | | | | | | |...

ruby-RCE-CVE-2019-5420-

إلغاء تسلسل ruby CVE-2019-5420 https://github.com/PenTestical/CVE-2019-5420 المراجع: 1 Ruby on Rails 命令执行漏洞payload实现过程 https://hackerone.com/reports/473888 بما أن ActiveSupport::MessageVerifier و ActiveSupport::MessageEncryptor يستخدمان Marshal كمُسلسِل افتراضي، فقد تأكدت من إمكانية تنفيذ الأوامر...

CVE-2026-38751

CVE-2026-38751 — OpenSTAManager Module Upload RCE Authenticated RCE via unvalidated ZIP upload in the module update endpoint. Affected: OpenSTAManager = 2.10.x Requirements pip install requests Usage Reverse shell Penelope or any listener python3 exploit.py -u http://TARGET -U admin -P admin...

CVE-2025-0282-Full-version

Storks: Remote Code Execution Vulnerability Exploitation Tool Overview Storks is a Python-based Proof-of-Concept PoC tool designed to demonstrate a critical Remote Code Execution RCE vulnerability, identified as CVE-2025-0282 , in a specific network appliance. This vulnerability can be exploited ...

CVE-2025-24813-POC

CVE-2025-24813 Apache Tomcat RCE PoC PoC for CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. Important: This PoC is intended solely for testing your own environments or for educational purposes. Any use of this PoC to exploit systems without proper authorization is...

CVE-2023-4220

CVE-2023-4220 Exploit Chamilo LMS Unauthenticated Big Upload File Remote Code Execution Usage cve-2023-4220.sh ./cve-2023-4220.sh ./cve-2023-4220.sh lms.test.htb 80 10.10.14.14 80 1 ./cve-2023-4220.sh -h Usage for RevShell: ./cve-2023-4220.sh Example: ./cve-2023-4220.sh lms.test.htb 80 10.10.14.1...

PoC-Funcional---CVE-2026-45247-Mirasvit-Full-Page-Cache-Warmer-RCE-

CVE-2026-45247 - Mirasvit Full Page Cache Warmer for Magento 2 - PHP Object Injection → RCE -red 📋 Description CVE-2026-45247 is a critical PHP Object Injection vulnerability in the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce. An unauthenticated attacker can achieve...

go-get-RCE

go-get-RCE This is the exploit of CVE-2018-6574: go get RCE This vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system installing their malicious library. This is a good example of a vulnerability that can be exploited using typosquatting to gain co...

MAL-2026-17618 Malicious code in @diezyclutch/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 220c03791e2404d6bddaf8542dedfd4b7b69f4519b260ab8cb162791d5f389d1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17619 Malicious code in dzyclutch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b5f3b0ba07dd680638f7c46393ed9a625dfa46962fbc53c5f17534995bb334f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyclutch-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bd1abac47f016ac53777bcc08d76d15a48330f1c53931e61d6704ce6f3398d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17413 Malicious code in yonzoffic-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17621 Malicious code in dzyclutch-libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63716521c367b7aea5217499683a4fced3139831cc949b92387538692a679287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17620 Malicious code in dzyclutch-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bd1abac47f016ac53777bcc08d76d15a48330f1c53931e61d6704ce6f3398d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in dzyhaxz-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08fd08c1026dee023b11946f939f5fb1c5763566c9577ccb99c2aa7a3c0c2684 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyhaxz-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8e7ca99c316f4b011bacc98bd321fb6e0afab999695d94c2cf41b1bff48b17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyclutch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b5f3b0ba07dd680638f7c46393ed9a625dfa46962fbc53c5f17534995bb334f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyclutch-libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63716521c367b7aea5217499683a4fced3139831cc949b92387538692a679287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17622 Malicious code in dzyhaxz-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08fd08c1026dee023b11946f939f5fb1c5763566c9577ccb99c2aa7a3c0c2684 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17623 Malicious code in dzyhaxz-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8e7ca99c316f4b011bacc98bd321fb6e0afab999695d94c2cf41b1bff48b17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...