786130 matches found
wordpress-rce-vapt-cve-2020-25213
WordPress RCE Exploitation & Mitigation CVE-2020-25213 π Project Overview This project was developed as part of the IE4012 β Offensive Hacking Tactics & Strategies module. It demonstrates a full cybersecurity attack lifecycle in a controlled lab environment, including: Social engineering attack...
CVE-2020-0674-Exploit
CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...
CVE-2021-41773
CVE-2021-41773 - Apache HTTP Server 2.4.49 Path Traversal & RCE π Description This is a proof-of-concept exploit for CVE-2021-41773, a path traversal and remote code execution vulnerability in Apache HTTP Server 2.4.49. Vulnerability Details CVE : CVE-2021-41773 Affected Version : Apache HTTP...
CVE-2024-7120
Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...
cve-2026-23744
CVE-2026-23744 β MCPJam Inspector Unauthenticated Remote Code Execution RCE Description Product : MCPJam Inspector Affected versions : β€ 1.4.2 Fixed version : 1.4.3 Type : Unauthenticated Remote Code Execution RCE Attack vector : Network Authentication required : No User interaction required : No...
Zena-CVE-2021-45026
Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC Process: Logs into Zena's webconfig page using default credentials Drops Stored XSS...
CVE-2025-55182
CVE-2025-55182 POST /formaction HTTP/1.1 Host: localhost Content-Type: multipart/form-data; boundary=----Boundary Content-Length: 297 ------Boundary Content-Disposition: form-data; name="$ACTIONREF0" ------Boundary Content-Disposition: form-data; name="$ACTION0:0"...
CVE-2024-9264-Fixed
π οΈ CVE-2024-9264 - Fixed Grafana RCE Exploit This is a fixed version of the proof-of-concept exploit for CVE-2024-9264 , a critical remote code execution vulnerability in Grafana via SQL expressions and DuckDB. π Original advisory: Grafana Security Release β Original PoC: Broken due to syntax...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
CVE-2019-16662
CVE-2019-16662 The official exploit for rConfig 3.9.2 Remote Code Execution CVE-2019-16662...
activemq-cve-2023-46604
Active MQ CVE-2023-46604 exploit This repository is a guide with examples on how to exploit the CVE-2023-46604 The exploit takes advantage of the usage of reflection for instantiating Exception classes through a malicious command that instead of being a valid command, it sends as the exception...
bluefire-sharepoint-cve-2025-53770
π Bluefire Redteam β SharePoint CVE-2025-53770 Detection & Remediation Toolkit This open-source toolkit provides security teams with battle-tested scripts to detect, assess, and remediate the critical SharePoint zero-day vulnerability CVE-2025-53770 CVSS 9.8 β currently being exploited in the wil...
CVE-2025-5777-TrendMicro-ApexCentral-RCE
π¨ CVE-2025-5777 β Trend Micro Apex Central Auth Bypass + RCE π Overview CVE-2025-5777 is a critical authentication bypass and remote code execution RCE vulnerability discovered in Trend Micro Apex Central. It allows unauthenticated attackers to execute arbitrary commands on the system by abusing ...
susinternals
susinternals - back from the dead by @deft @cablethief & @randomwalksp reino This tool allows you executing commands remotely via the PSExeSVC service from a python script. It can be used to: Authenticate as a user with a primary token: Authenticate as system: Full blog post can be found here!...
CVE-2025-55182
CVE-2025-55182 Toolkit & Lab Educational Only Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182. For educational and authorized testing only. Features Root-cause writeup, visuals, and lab: see React2ShellDeconstructingaPerfect10RCE.pdf and the attack-path...
CVE-2025-6218-POC
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...
CVE-2025-11170
CVE-2025-11170 WP移θ‘ε°η¨γγ©γ°γ€γ³ for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload π WP移θ‘ε°η¨γγ©γ°γ€γ³ for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload π Description The WP移θ‘ε°η¨γγ©γ°γ€γ³ for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...
CVE-2023-26035
CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated Install Grab Repo $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Setup Note: Install the latest version of node $ npm init $ npm i axios cheerio yargs Usage ββββv37r1x@7h3B14ckKn1gh75β/Documents/Code/CVE-2023-26035 ββββΌ $nod...
gitlab_rce_cve-2022-2884
gitlabrcecve-2022-2884 This is a Python3 program that exploits GitLab authenticated RCE vulnerability known as CVE-2022-2884. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not take responsibility for the...