CVE-2023-32571-POC

Dynamic Linq injection to RCE - CVE-2023-32571 About Dynamic Linq injection to RCE CVE-2023-32571 Recently, members of the NCC Group discovered a vulnerability in Dynamic Linq that allows attackers to call C functions through a Linq Injection, thus making it possible to obtain RCE. Even with the...

CVE-2022-22947-

CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expression injection command execution（CVE-2022-22947） Inject Godzilla memory shell Default key pass base64 Note: the code does not clear the route part, please clear it yourself.. Test environment:...

CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher Unauthenticated File Upload RCE isimage vs extractfileextension Mismatch → PHP Polyglot Upload Overview CVE-2026-13001 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Podlove Podcast Publisher WordPress plugin...

CVE-2023-6553

CVE-2023-6553 PHP File Inclusion Leading to RCE — Backup Migration Plugin Plugin: Backup Migration backup-backup ≤ 1.3.7 CVSS: 9.8 Critical CWE: CWE-98 — Improper Control of Filename for Include/Require Statement Authentication Requirement: None Impact: Remote Code Execution 1. What is this...

CVE-2024-52375

WordPress Datasets Manager 💥 Exploit by: Nxploit Khaled Alenazi 📅 CVE Published: November 14, 2024 🧠 CVSS Score: 10.0 Critical 🛠 CWE-434: Unrestricted Upload of File with Dangerous Type 📌 Description A critical vulnerability was discovered in the Datasets Manager by Arttia Creative WordPress...

OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Test Environment vulhub/ofbiz:18.12.09 Usage Start java -jar OFBiz-Attack.jar There are three modules: Vulnerability Detection Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module exploitation...

CVE-2021-26855-Exchange-RCE

CVE-2021-26855-Exchange-RCE Microsoft Exchange Proxylogon Exploit Chain EXP Analysis + CVE-2021–26855 + CVE-2021–27065 Reproduction Summary...

CVE-2021-41773

CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

CVE-2024-7954-RCE

Description The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. Exploit Proof of concept POST...

CVE-2017-5645

CVE-2017-5645 CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs Source IPs attempting attacks using Apache Log4j RCE, including a large number of Tor nodes, see Attack-IP.md IOCs for malware, botnets, etc. propagated via the Log4j vulnerability, see IOC-C2.md Snort detection rules, see Snort.md Suricata rules, see...

CVE-2022-36804-POC

CVE-2022-36804-POC 🕷️ Bitbucket CVE-2022-36804 unauthenticated remote command execution Exploitation Find publicly visible repositories - example.com/repos?visibility=public...

CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution

CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution The attacker machine is Kali Linux and Windows Server 2008 R2 as the target machine. Import the windows 2008 R2 Server from the given https://drive.google.com/drive/folders/146ViggeQl0pSpzotcAhpd3h9UP7fFOxJ?usp=sharing into your virtual b...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...

OpenVAS-Vulnerability-Analysis-Incident-Response-Report

OpenVAS-Vulnerability-Analysis-Incident-Response-Report Real-World Simulation: FTP Service Exploitation ProFTPD CVE-2015-3306 Real-World Simulation: FTP Service Exploitation ProFTPD CVE-2015-3306 📌 Overview This project demonstrates a full-cycle vulnerability assessment and incident response...

dubiousdisk

dubious disk - the porygon-z that's super effective against secure boot! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more... Overly permissive code in the Windows boot environment allows for overwriting arbitrary memory, and therefore, arbitrary code execution. Exploitro...

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

Open-Worldwide-Application-Security-Project-OWASP-

Open-Worldwide-Application-Security-Project-OWASP- Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution CVE-2012-1823...

React2ShellPoC

Understanding CVE-2025-55182 React2Shell: A Deep Dive into Remote Code Execution via React Server Components Overview CVE-2025-55182, also known as React2Shell , is a critical remote code execution RCE vulnerability affecting React Server Components. This flaw enables unauthenticated attackers to...