774270 matches found
Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-
Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813- Apache Tomcat - Remote Code Execution via Session Deserialization CVE-2025-24813...
MoodleExploit
Moodle Exploit Exploit Title: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/archive/v3.4.1.zip Version: 3.4.1 Possibly 3.5.0 and maybe even...
Penetration-Testing-Assessment-23-04-2026
Penetration Testing Report β IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...
cve-2022-24644
CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticated Update Remote Code Execution Vulnerability Usage: python3 cve-2022-24644poc.py Details in the report at gerr.re. Steps to reproduce 1. Install KeyMouse Windows 3.08; 2. Set spoof www.keymouse.com to our attacker ip; For the...
CVE-2025-31337
CVE-2025-31337 Security Advisory CVE ID: CVE-2025-31337 Published: 2025-03-15 CVSS Score: 9.8 Critical CWE: CWE-120 Buffer Copy without Checking Size of Input Description A critical buffer overflow vulnerability was discovered in the AIDR ChatBot Framework version 4.2.0 and earlier. The...
CVE-2025-49132-PHP-PEAR
CVE-2025-49132: Pterodactyl Panel Unauthenticated RCE via PHP PEAR Method Table of Contents Overview Vulnerability Details Technical Analysis Exploit Flow Installation Usage Examples Mitigation Disclaimer References Author Overview This repository contains a proof-of-concept PoC exploit for...
CVE-2021-22205
CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string...
threat-intel-cve-2024-3094
Threat Intelligence Report: CVE-2024-3094 β XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...
CVE-2025-50165-x64-Exploit
CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG β Windows 11 24H2 unpatched CVSS 9.8 β No privileges, no interaction required CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patched: November 202...
day08-CISCO-fmc-sim
Day08 β Cisco FMC-style Management RCE Simulation This is a minimal, educational simulation that demonstrates the impact class of a management-plane parsing RCE inspired by CVE-2025-20265. It intentionally executes commands from crafted input for local learning only. Quickstart chmod +x...
uc_browser_poc_CVE-2022-1364
UCBrowserExploit.js Introduction All content below refers to the UC Browser exploit explored in this article posted by Interrupt Labs. Getting Started This exploit relates to previous versions of the UC Browser that include the RCE bug of CVE-2022-1364. This bug was patched in the UC browser in...
CVE-2018-11736
CVE-2018-11736 PHP RCE Exploit Pluck CMS Disclaimer β οΈ: This exploit was developed in Rust primarily as an introductory programming learning exercise. Please excuse any lack of technical rigor or non-idiomatic code patterns. Also, this is not my discovery; I relied on official reports to write thi...
CVE-2026-23744-MCPJam-Exploit
CVE-2026-23744 MCPJam Inspector RCE Exploit β οΈ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Unauthorized use is illegal. Users assume all responsibility for their actions. π Overview This repository contains a proof-of-concept exploit for CVE-2026-23744 ,...
CVE-2025-0868
Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...
eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE
Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...
CVE-2018-14667
CVE-2018-14667 env the rich.ser can open the Calculator.app only MacOs download this project. the poc program in web-inf/src/Main.java...
CVE-2020-8163
CVE-2020-8163 Enviroment and exploit to CVE-2020-8163 Blind remote code execution of user-provided local names in Rails 5.0.1 and 4.2.11.2 Create the enviroment 1. create docker container mapping port 4000 to 8001 sudo docker run --rm -it -p 8001:4000 ruby:2.3 bash 2. update and install some tool...
Nagios-CVE-2019-15949-RCE
Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15949 Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with...
OffensiveVBA
OffensiveVBA In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and evasion techniques. The list got longer and longer and I found no central place for offensive VBA templates - so this repo can be used for such. It is very far away...