790537 matches found
CVE-2024-25600
Bricks Builder RCE Exploit CVE-2024-25600 This project contains a Python-based exploit script targeting the Bricks Builder WordPress plugin Remote Code Execution RCE vulnerability identified as CVE-2024-25600. The exploit allows unauthorized remote command execution by injecting PHP code via a...
CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-
Microsoft-Windows---srv2.sys-SMB-Code-Execution-Python-MS09-050- Microsoft Windows - 'srv2.sys' SMB Code Execution Python MS09-050 Exploit for CVE-2009-3103 Overview This Python script is an updated version of a public exploit for CVE-2009-3103. The original code relied on the SMB.connection...
CVE-2025-55182
CVE-2025-55182 https://github.com/user-attachments/assets/0da9a623-fe2a-4a96-8192-7a07a76635d7 React2Shell Scanner - Burp Suite Extension Description React RCE Scanner is a Burp Suite extension designed to detect and exploit the React vulnerability CVE-2025-55182 Remote Code Execution in React...
http-vuln-CVE-2022-41082
UPDATED VERSION ALLOWS FOR HTTPS CHECK AS WELL exchange-vuln-check.nse FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt http-vuln-CVE-2022-41082 Microsoft...
CVE-2017-11882
CVE-2017-11882 Overview From the perspective of exploit effectiveness, it can kill all versions of Office from 2003 to 2016, and the entire attack environment is very simple to build. This vulnerability is caused by the Equation Editor in Office software. Because the editor process does not...
CVE-2024-6387
CVE-2024-6387 : Vulnerability Detection tool for regreSSHion Remote Unauthenticated Code Execution in OpenSSH Server CVEHunter tool for vulnerability detection tool for CVE-2024-6387 with Asychronous Performance. 💻 Installation git clone https://github.com/th3gokul/CVE-2024-6387.git cd...
CVE-2026-20841-PoC
It is unclear whether this is the correct PoC trigger method; therefore, it is provided for reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Notepad Version 11.2510 step 1. step 2...
chromium-exploit-dev
Chromium Exploit Development Toolkit A toolkit for weaponizing Chromium vulnerabilities into reliable, cross-platform, full-chain exploits. Overview This project provides a set of powerful helper scripts but requires you to bring your own vulnerabilities. You are responsible for implementing...
php2shell-check
php2shell-check A read-only triage script for WordPress sites after PHP2Shell CVE-2026-109618 and CVE-2026-109619, the pair of critical remote code execution bugs in the PHP engine disclosed on October 21, 2026. Patching PHP closes the door, but Amazon's honeypots logged an exploitation attempt o...
fire-wall-server
🛡️ Spring4Shell Firewall Mitigation Python Script This project simulates a firewall using Python's built-in http.server module to detect and block malicious requests exploiting the Spring4Shell CVE-2022-22965 vulnerability. 🔍 About Spring4Shell is a critical Remote Code Execution RCE vulnerability...
CVE-2026-32238_RemoteCodeExecutionOpenEMR8.0.0
CVE-2026-32238 - Remote Code Execution in OpenEMR Weakness CWE-78 : Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize...
CVE-2025-1094-PoC-Postgre-SQLi
Analysis of CVE-2025-1094 and Emulation Setup This detailed examination, conducted on March 14, 2025, explores CVE-2025-1094, a hypothetical high-severity SQL injection vulnerability in PostgreSQL, based on the provided emulation setup and proof-of-concept PoC execution. The analysis covers the...
CVE-2023-43284
CVE-2023-43284 DLink Model DIR-846 Authenticated Remote Code Execution. This flaw abuse QoS POST parameter in the router to exploit an Authenticated Remote Code Execution. Doesn't require QoS be enabled! -h, --help show this help message and exit -x , --command Command to be executed Default: id ...
CVE-2020-0688
python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...
CVE-2019-17621
DLink RCE vuln CVE-2019-17621 unauthenticated rce FAT can emulate this so plz use attifyos...
CVE-2017-9841
phpunit-shell ⭐ a simple python3 script to exploit CVE-2017-9841. the exploit - CVE-2017-9841 ❗ simple script that exploits a remote code execution vulnerability found in PHPUnit before 4.8.28 and 5.x before 5.6.3. makes a post request to the target with user input system commands...
SAP-CVE-2025-31324
SAP-CVE-2025-31324 POC A tool to detect and exploit a critical unauthenticated file‐upload vulnerability in SAP NetWeaver Visual Composer. Description SAP NetWeaver Visual Composer includes a component called Metadata Uploader which lacks proper authorization checks, allowing unauthenticated...
CVE-2025-66956
CVE-2025-66956 Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. CVSS Vectors CVSS 3.1: 9.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 4.0: 10.0,...
Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177
Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...