CVE-2024-21683-RCE

CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...

CVE-2024-11320

CVE-2024-11320 Exploit for Pandora FMS Remote Code Execution CVE-2024-11320...

D-Link

CVE-2024-10914 D-Link Remote Code Execution RCE D-Link NAS- Command Injection via Name Parameter CVE-2024-10914:- A vulnerability was found in D-Link DNS-320, DNS- 320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiusera...

CVE-2021-22205

CVE-2021-22205 Pocsuite3 For CVE-2021-22205, Unauthorized RCE...

CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

CVE-2021-26084_PoC

CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...

CVE-2023-38831-PoC

CVE-2023-38831 PoC This repository is just a Proof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inclu...

cve-2019-14540-exploit

CVE-2019-14540 Exploit http://www.leadroyal.cn/?p=939 Environment limitation: This demo uses the jndi ldap exploitation method, so a low version less than 8u191 of the jdk is required. 1. Use marshalsec to create an ldap service on local port 1389, pointing to the http service on local port 8000...

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

CVE-2025-24893

CVE-2025-24893 – XWiki Remote Code Execution RCE Overview CVE-2025-24893 is a critical unauthenticated Remote Code Execution RCE vulnerability in XWiki , a widely used open-source enterprise wiki platform. The flaw exists in the SolrSearch macro, which improperly evaluates Groovy expressions...

WhatsRCE

WhatsRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRCE && bash...

telerik-scanner-CVE-2019-18935

Telerik CVE-2019-18935 Vulnerability Scanner A Python-based security scanner designed to detect the Telerik UI for ASP.NET AJAX Remote Code Execution vulnerability CVE-2019-18935. 🚨 Vulnerability Details CVE : CVE-2019-18935 Risk Level : HIGH CWE : CWE-913 CVSS : 9.8 Critical Description Telerik ...

poc-CVE-2026-23489

POC CVE-2026-23489 Proof of concept for CVE-2026-23489 GLPI "Fields" plugin --cookie-value COOKIEVALUE GLPI session cookie value --php PHP Raw PHP to execute on the server end statements with ';', Dropdowns...

CVE-2023-38035

CVE-2023-38035 POC for CVE-2023-38035 affecting Ivanti Sentry Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive Summary This POC abuses an unauthenticated command...

CVE-2026-10795

CVE-2026-10795 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress Pre-Auth Reflected XSS → Remote Code Execution Chain DOM Clobbering + Application Password Theft + REST API Plugin Activation = Full RCE ⚡ Overview CVE-2026-64638 is a critical pre-authentication Reflected XSS in WordPress wp-login.php. The vulnerability exist...

POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution

⚠️🚀 CVE-2025-24813 — Apache Tomcat RCE Exploitation Suite ⚡ Version: 1.0 🛡️ CVE ID: CVE-2025-24813 Apache Tomcat RCE 🧬 Payloads: ysoserial / Java 🌐 Mode: Interactive + Stealth 🔬 Usage: Ethical, Investigative, Educational 🌌 Overview This tool has been designed as a futuristic exploitation suite...

CVE-2014-1303

CVE-2014-1303 PoC for Linux CVE-2014-1303 WebKit Heap based BOF proof of concept for Linux. This repository demonstrates the WebKit heap based buffer overflow vulnerability CVE-2014-1303 on Linux. Used in the seccamp lecture. NOTE: Original exploit is written for Mac OS X and PS4 PlayStation4. I'...

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Project on CVE-2022-30190 exploitation and mitigation strategies 📌 About This repository contains my final project for ICT287, where I explore the CVE-2022-30190 "Follina" vulnerability. The project covers: Detailed analysis of the exploit Step-by-step execution proces...

CVE-2026-20253

CVE-2026-20253 - Splunk Enterprise ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone https://github.com/HORKimhab/CVE-2026-20253 cd...