CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE in CGI Servlet – Apache Tomcat on Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat has a vulnerability in the CGI Servlet which ca...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

NoSQLMap

NoSQLMap NoSQLMap es una herramienta de Python de código abierto diseñada para auditar y automatizar ataques de inyección, así como explotar configuraciones predeterminadas débiles en bases de datos NoSQL y aplicaciones web que usan NoSQL, con el objetivo de divulgar o clonar datos de la base de...

CVE-2020-2551

CVE-2020-2551 Weblogic RCE con IIOP 0x01 Habilitación por defecto de IIOP 0x02 Poc Demo...

Paperclip - Remote Code Execution

Paperclip 2026.416.0 contains a remote code execution caused by a chain of six unauthenticated API calls in authenticated mode with default configuration, letting unauthenticated attackers execute arbitrary code remotely, exploit requires network access to the target. id: CVE-2026-41679 info: nam...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...

CVE-2020-35590

Exploit Information Exploit Title: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Login Limit Bypass CVE: CVE-2020-35590 Date: 2020-06-09 Exploit Author: N4nj0 Software Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Tested on: WordPress 5.4.1, 5.4.2...

CVE-2023-27524

CVE-2023-27524 Configuración predeterminada insegura en Apache Superset conduce a ejecución remota de código Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Comenzar con $ git clone https://github.com/Pari-Malam/CVE-2023-27524 $ cd CVE-2023-27524 $ pip/pip3 install -r...

cve-2019-6260

A Test and Debug Tool for ASPEED BMC AHB Interfaces Warning DO NOT USE THIS TOOL IF YOU HAVE NOT UNDERSTOOD ITS BEHAVIOURS IN THE CONTEXT OF YOUR TARGET MACHINE. This tool pokes at low-level hardware and firmware interfaces of your machine. Particularly, the act of probing implies uncertainty abo...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688Microsoft Exchange vulnerable de deserialización de MachineKeySection predeterminada Instrucciones de instalación: Descargar usando git Requiere git: git clone https://github.com/7heKnight/CVE-2020-0688 Descargar archivo ZIP:...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

CVE-2023-45612-PoC

CVE-2023-45612 PoC This repository contains a proof of concept PoC for CVE-2023-45612 which allowed XXE in the default configuration of ContentNegotiation in ktor. The PoC is split into 2 parts: server/, containing an example of a Ktor server using an affected version of Ktor, with an endpoint...

fastjson-cve

CVE-2026-16723 Reproduction Project Overview This project reproduces CVE-2026-16723 — a critical Remote Code Execution RCE vulnerability in fastjson 1.2.68 through 1.2.83. The vulnerability allows RCE under default configuration without requiring AutoType enablement or pre-existing classpath...

SCAT

SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...

Apache-Solr-Arbitrary-File-Read

Apache Solr Arbitrary File Read Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and client libraries for many programming languages such...

CVE-2026-30225-OliveTin-RCE

OliveTin — unauthenticated action execution → RCE + CVE-2026-30225 PoC for privilege escalation / remote code execution against OliveTin instances that run with the shipped guest defaults. Verified against OliveTin 3000.10.0 running as root HTB: Enigma, where it yields an unauthenticated root...

exploit-CVE-2026-23744

exploit-CVE-2026-23744 MCPJam Inspector is a local-first development platform for MCP servers. In versions 1.4.2 and earlier, a RCE flaw lets attackers send crafted HTTP request that installs an MCP server and runs code remotely, because the service listens on 0.0.0.0 instead of 127.0.0.1 by...

CVE-2026-63563

CVE-2026-63563 - Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers Vendor advisory: Sharp Product Security Advisory 2026-004 published July 31, 2026 Summary Sharp MX/BP series multifunction printers expose the address book through the device web interface without...

hekate

Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...