784943 matches found
Confluence_CVE-2021-26084
ConfluenceCVE-2021-26084 Remote Code Execution on Confluence Servers : CVE-2021-26084 PoC Confluence Possible exploit endpoints https:///login https:///pages/templates2/viewpagetemplate.action https:///template/custom/content-editor https:///templates/editor-preload-container...
CVE-2022-36553-PoC
CVE-2022-36553 - Hytec Inter HWL-2511-SS Unauthenticated Remote Command Injection. Overview This repository contains a Proof of Concept PoC reverse shell script for exploiting CVE-2022-36553, a critical vulnerability in Hytec Inter HWL-2511-SS devices. The script is a practical demonstration,...
CVE-2026-33725
CVE-2026-33725 A proof-of-concept exploit for CVE-2026-33725, a Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import in Metabase. Vulnerable Versions Metabase Enterprise ≥ v1.47 and v1.54.22 Metabase Enterprise ≥ v1.54.0 and v1.54.22 Metabase...
EUVD-2026-39473
Keycloak vulnerable to cross-site scripting xss via case-insensitive uri validation bypass...
EUVD-2023-60725
A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...
CVE-2023-7357
A remote code execution (RCE) vulnerability exists in the FlexNet Publisher lmadmin web user interface. The underlying cause is categorized as CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). This vulnerability can lead to unauthorized code execution on the system. The issue is...
cve-2021-4034
cve-2021-4034...
Atmail-exploit-toolchain
AtMail Email Server Appliance 6.4 - Exploit toolchain XSS CSRF RCE PacketStorm WLB-2020080010 Disclaimer: this exploit toolchain was inspired by EDB-ID 20009. Goal The goal of this exploit toolchain is to replace EDB-ID 20009. Pros of this toolchain over EDB-ID 20009 exploit: Simple to use Reusab...
CVE-2017-11882
CVE-2017-11882 Exploit CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum. For remote command execution,this exploit will call WinExec with SWHIDE and call ExitProcess after WinExec returns. For remote code execution,this exploit just jmp to code. I cannot find a reference...
CVE-2022-39197-RCE
CVE-2022-39197-RCE First This project was modified from @its-arun project https://github.com/its-arun/CVE-2022-39197 When I tested the script, I found that the frida script could not query the data in the normal order. The method of modifying the frida script to modify the process name. Thanks to...
CVE-2024-40711
CVE-2024-40711 Exploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 See our blog post for technical details https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC in Action CVE-2024-40711.exe -f binaryformatter -g Veeam -c...
CVE-2016-3088
Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...
CVE-2019-6340
CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number Example: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...
cve-2021-25646
Apache Druid Remote Code Execution Vulnerability Summary Apache Druid has released a security update announcing a remote code execution vulnerability, numbered CVE-2021-25646. Due to the lack of authorization and authentication by default in Apache Druid, attackers can send specially crafted...
CVE-2026-33701-Unsafe-Deserialization-in-OpenTelemetry-Java-Agent-RMI-Instrumentation
CVE-2026-33701 — Unsafe Deserialization in OpenTelemetry Java Agent RMI Instrumentation Severity: Critical CVSS v4.0: 9.3 Affected versions: opentelemetry-javaagent 2.26.1 Patched in: 2.26.1 released March 23, 2026 Overview OpenTelemetry is probably the most widely adopted observability framework...
fastjson-check
fastjson-check 一条命令，查清你的 Java 应用里到底有没有 fastjson、藏在哪、是否受 CVE-2026-16723 影响。 零依赖 · 完全离线 · 单个 23KB 的 jar · 支持 Java 8+ English | 下载 为什么需要它 2026 年 7 月 21 日，fastjson 官方公布 CVE-2026-16723 （CVSS 9.0 ，远程代码执行）： 影响 fastjson 1.2.68 1.2.83 默认配置即可利用 —— 不需要开启 AutoType，不需要 classpath gadget，不需要认证 公告数日内即出现在野利用，主要针对...
CVE-2026-21531
Security Feature Bypass in ASP.NET Core by Microsoft CVE-2026-21531 🌟 Description A vulnerability in the Azure SDK facilitates deserialization of untrusted data, enabling unauthorized attackers to execute arbitrary code over a network. ⚙️ Installation To set up the exploitation tool, follow these...
BlackBerryC2
BlackBerryC2 2.0.0-beta BlackBerryC2 is an encrypted remote administration and C2 framework designed exclusively for educational use, security research, and controlled laboratory environments. The project demonstrates how to build a custom command-and-control server with application-layer...
CVE-2026-32746
🚨 CVE-2026-32746 GNU Inetutils Telnetd RCE 🔥 📌 Executive Summary Critical Vulnerability | CVSS 9.8 | Remote Code Execution! Affects: GNU Inetutils Telnetd versions prior to 2.7 Type: OOB Write in the LINEMODE SLC suboption handler Attack Vector: Network Port 23 | No authentication required Impact...