CVE-2019-18935

CVE-2019-18935 Nuclei Template - Bounty Submission This repository contains a complete, validated Nuclei template for detecting CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, created for the ProjectDiscovery bounty program. 🎯 Overview CVE-2019-18935 is a critical .NET...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

Sandbox Challenge: Log4Shell CVE-2021-44228 Overview This walkthrough documents the steps taken to complete the CISA Threat Sandbox Challenge for CVE-2021-44228, commonly known as Log4Shell. The challenge involved completing two objectives — one red team offensive and one blue team defensive —...

CVE-2024-12828-PoC

CVE-2024-12828-PoC Webmin CGI Command Injection Remote Code Execution Vulnerability...

CVE-2019-9978-RCE-PoC

CVE-2019-9978 RCE PoC – Social Warfare WordPress Plugin Exploit Unauthenticated Remote File Inclusion RFI to Remote Code Execution RCE 📌 Description This repository contains a Python-based Proof of Concept PoC demonstrating the exploitation of CVE-2019-9978 , a critical vulnerability in the Socia...

CVE-2025-65754

CVE-2025-65754 : Stored XSS in Algernon 1.17.4 Description Algernon v1.17.4 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into a filename. Affected Project : Algernon - 1.17.4 Project maintainer : Alexander F. Rødseth...

CVE-2020-29607-POC

Pluck CMS 4.7.13 File Upload RCE Exploit 🚨 Educational Remote Code Execution Exploit 🚨 Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...

CVE-2021-21220

Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...

CVE-2023-23397

CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook CVE-2023-23397 is a remote code execution vulnerability in Microsoft Outlook, a popular email client used by millions of users worldwide. This vulnerability was discovered by security researcher Leandro Costa and reported to...

glibc: Buffer Overflow in strfmon right-justification padding

A flaw was found in glibc. The strfmon and strfmonl functions are vulnerable to a buffer overflow when processing right-justified width padding. This occurs because an incorrect length is used for an internal memory operation, causing data to be written beyond its intended buffer. An attacker cou...

exploit-CVE-2015-3306

ProFTPd 1.3.5 - modcopy Remote Command Execution ProFTPD è un demone FTP altamente configurabile per Unix e sistemi operativi simili a Unix. ProFTPD è nato dal desiderio di avere un server FTP sicuro e configurabile. È stato ispirato da una notevole ammirazione per il server web Apache. A...

ROOT-APP-NPM-GHSA-5P4M-2WFM-XMQJ GHSA-5p4m-2wfm-xmqj in js-yaml - Patched by Root

Root has patched GHSA-5p4m-2wfm-xmqj in the js-yaml package for Root:npm. Multiple fixed versions available...

dfir-malware-investigation

DFIR Malware Investigation Lab – Spring4Shell CVE-2022-22965 A comprehensive Digital Forensics & Incident Response DFIR project that simulates, detects, and investigates the Spring4Shell CVE-2022-22965 critical vulnerability. This project demonstrates the complete incident response lifecycle from...

HTB-Pterodactyl-RCE-CVE-2025-49132

Pterodactyl Panel Locale RCE CVE-2025-49132 — Educational PoC -6f42c1 For authorized testing and defensive learning only. This repository is intended for controlled lab environments e.g., CTF/HTB-style setups where you own the target or haveexplicit written permission to test it. Context This...

HeimShell

HeimShell CVE-2023-51803 HeimShell is an exploit for CVE-2023-51803, leveraging an arbitrary file-upload vulnerability in LinuxServer.io Heimdall ≤ 2.5.6. It will auto-detect the target version and either warn of exploitability or remote fetch a php shell defined by SHELLURL ≤ 2.2.2 : Aribtrary...

CVE-2022-46169_unauth_remote_code_execution

CVE-2022-46169 - Unauthenticated Remote Code Execution Cacti Unauthenticated Remote Code Execution through authentication bypass and command injection in Cacti 1.2.23 and 1.3.0 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems...

CVE-2024-55963

CVE‑2024‑55963 Appsmith RCE PoC PoC exploit for CVE‑2024‑55963 that runs arbitrary commands or spawns reverse shell on vulnerable Appsmith instances. It automatically handles both modern servers with the environmentId feature and much older “legacy” builds that pre‑date it, so you can use one...

PaloAltoRceDetectionAndExploit

PaloAlto Rce Detection And Exploit Detecion for the vulnerability CVE-2017-15944 Till now no vulnerability scanner detecting the vulnerability Detection and exploit...

CVE-2022-30525

CVE-2022-30525 CVE-2022-30525 POC exploit Usage usage: exploit.py -h -t TARGET -lhost LOCALHOST -lport LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET IP address of the target, eg: https://127.0.0.1:9443 -lhost LOCALHOST, --localhost LOCALHOST I...

cve-2023-30212

cve-2023-30212 PoC for CVE-2023-30212 using Docker CVE-2023-30212 Environment Setup and PoC Report 📌 Overview This report details the direct construction of a Docker-based vulnerable web environment for CVE-2023-30212, a vulnerability not present in Vulhub, and demonstrates the vulnerability...

CVE-2013-1081

This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...