CVE-2024-30088__Windows-TOCTOU-exploit

CVE-2024-30088 – WinRM Adapted PoC 📌 Summary This is a modified version of the original CVE-2024-30088 exploit, adapted to work in non-interactive environments WinRM. The original PoC spawns an interactive cmd.exe, which does not work over WinRM. This version focuses on non-interactive execution...

CVE-2018-2628

CVE-2018-2628 A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Detailed Steps to Reproduce CVE-2018-2628: 0x01 Run the following command on the JRMPListener host: wget https://jitpack.io/com/github/frohoff/ysoserial/master/ysoserial-master.jar java...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084, Atlassian Confluence OGNL Injection Vulnerability Atlassian Confluence is a widely used wiki system in enterprises, and some versions contain an OGNL expression injection vulnerability. Attackers can exploit this vulnerability to execute arbitrary code on the target...

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

CVE-2024-43363

CVE-2024-43363 CVE-2024-43363 Exploit Script This Python script is designed to test if a Cacti instance is vulnerable to CVE-2024-43363, a Remote Code Execution RCE vulnerability caused by log poisoning. How the Vulnerability Works: Log Poisoning: An attacker injects PHP code into device names,...

Claude-Code-MCP-Injection-PoC

Claude Code: MCP Tool Confirmation Prompt Misrepresentation A professional Proof-of-Concept PoC demonstrating a critical UI/UX flaw in Anthropic's Claude Code. This vulnerability allows a malicious MCP server to mislead users into approving arbitrary command execution by misrepresenting tool...

CVE-2021-3130

CVE-2021-3129 Yet another exploit for CVE-2021-3129! Made to have more features and reliability. Based on https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on...

EvilRip

Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...

CVE-2017-8759

Exploit toolkit for CVE-2017-8759 Do not be an asshole Simple tool written in C to handle the RCE vulnerability in .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7. aka ".NET Framework Remote Code Execution Vulnerability." Help C:\Users\Jonas Uliana\toolsCVE-2017-8759.exe /h INFO ...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246 Exploit Usage: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Features of This Tool Since the heartbeat mechanism triggers the vulnerability every 30 seconds, the tool introduces a...

HuaWei_Route_HG532_RCE_CVE-2017-17215

HuaWeiRouteHG532RCECVE-2017-17215 POCsuite and goland implementation of Huawei HG532 router command injection CVE-2017-17215 POC goland Implementation POCsuite Implementation For writing and code, please refer to: https://blog.csdn.net/qq41490561/article/details/127659604...

CVE-2025-63830

📂 CKFinder 1.4.3 – Stored Cross-Site Scripting XSS via Malicious SVG Upload CVE ID: CVE-2025-63830 🧭 Overview A stored Cross-Site Scripting XSS vulnerability was identified in CKFinder v1.4.3. The issue resides in the file upload functionality, which fails to properly sanitize SVG files containin...

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...

CVE-2026-75865

CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 Proof-of-concept and technical write-up for CVE-2026-75865 , an unauthenticated arbitrary file upload leading to remote code execution in the WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent...

rails-exploit-cve-2013-0156

== Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 Bootstrapped a Rails 3.2.10 application with the remote code execution exploit. Ref: https://github.com/ronin-ruby/ronin-ruby.github.com/blob/rails-pocs/blog/posts/2013-01-09-rails-pocs.md === Setup Install gem dependencies and fire up the...

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...

CVE-2025-6389

CVE-2025-6389 Sneeit Framework 📡 Don't miss the next drop. Follow @KNxploited on Telegram — the definitive channel for freshly disclosed CVEs, working exploits, and elite security research. First to know. First to act. 🧠 Overview CVE-2025-6389 is a CVSS 9.8 Critical Remote Code Execution...

Ashwesker-CVE-2025-60021

🛑 CVE-2025-60021 — Apache bRPC Remote Command Injection 📌 Overview CVE-2025-60021 is a critical remote command injection vulnerability found in the heap profiler built-in service /pprof/heap of Apache bRPC versions earlier than 1.15.0 , allowing unauthenticated attackers to run arbitrary OS...

CVE-2025-49113

Python Script for CVE-2025-49113 Usage: python exploit.py https://ubuntu.com/security/CVE-2025-49113 Description: Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in...

CVE-2023-34960

CVE-2023-34960 Chamilo Command Injection with auto upload shell. use ur logic check path directory at your result vuln, then you can find your access shells wso.php To Install & Execute $ git clone https://github.com/Mantodkaz/CVE-2023-34960 $ cd CVE-2023-34960 $ pip install -r requirements.txt $...