http-vuln-CVE-2022-41082

UPDATED VERSION ALLOWS FOR HTTPS CHECK AS WELL exchange-vuln-check.nse FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt http-vuln-CVE-2022-41082 Microsoft...

CVE-2017-11882

CVE-2017-11882 Overview From the perspective of exploit effectiveness, it can kill all versions of Office from 2003 to 2016, and the entire attack environment is very simple to build. This vulnerability is caused by the Equation Editor in Office software. Because the editor process does not...

CVE-2024-6387

CVE-2024-6387 : Vulnerability Detection tool for regreSSHion Remote Unauthenticated Code Execution in OpenSSH Server CVEHunter tool for vulnerability detection tool for CVE-2024-6387 with Asychronous Performance. 💻 Installation git clone https://github.com/th3gokul/CVE-2024-6387.git cd...

CVE-2026-20841-PoC

It is unclear whether this is the correct PoC trigger method; therefore, it is provided for reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Notepad Version 11.2510 step 1. step 2...

chromium-exploit-dev

Chromium Exploit Development Toolkit A toolkit for weaponizing Chromium vulnerabilities into reliable, cross-platform, full-chain exploits. Overview This project provides a set of powerful helper scripts but requires you to bring your own vulnerabilities. You are responsible for implementing...

php2shell-check

php2shell-check A read-only triage script for WordPress sites after PHP2Shell CVE-2026-109618 and CVE-2026-109619, the pair of critical remote code execution bugs in the PHP engine disclosed on October 21, 2026. Patching PHP closes the door, but Amazon's honeypots logged an exploitation attempt o...

fire-wall-server

🛡️ Spring4Shell Firewall Mitigation Python Script This project simulates a firewall using Python's built-in http.server module to detect and block malicious requests exploiting the Spring4Shell CVE-2022-22965 vulnerability. 🔍 About Spring4Shell is a critical Remote Code Execution RCE vulnerability...

CVE-2026-32238_RemoteCodeExecutionOpenEMR8.0.0

CVE-2026-32238 - Remote Code Execution in OpenEMR Weakness CWE-78 : Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize...

CVE-2025-1094-PoC-Postgre-SQLi

Analysis of CVE-2025-1094 and Emulation Setup This detailed examination, conducted on March 14, 2025, explores CVE-2025-1094, a hypothetical high-severity SQL injection vulnerability in PostgreSQL, based on the provided emulation setup and proof-of-concept PoC execution. The analysis covers the...

CVE-2023-43284

CVE-2023-43284 DLink Model DIR-846 Authenticated Remote Code Execution. This flaw abuse QoS POST parameter in the router to exploit an Authenticated Remote Code Execution. Doesn't require QoS be enabled! -h, --help show this help message and exit -x , --command Command to be executed Default: id ...

CVE-2020-0688

python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...

CVE-2019-17621

DLink RCE vuln CVE-2019-17621 unauthenticated rce FAT can emulate this so plz use attifyos...

CVE-2017-9841

phpunit-shell ⭐ a simple python3 script to exploit CVE-2017-9841. the exploit - CVE-2017-9841 ❗ simple script that exploits a remote code execution vulnerability found in PHPUnit before 4.8.28 and 5.x before 5.6.3. makes a post request to the target with user input system commands...

CVE-2025-66956

CVE-2025-66956 Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. CVSS Vectors CVSS 3.1: 9.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 4.0: 10.0,...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own o...

CVE-2025-48384

PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology Unauthenticated RCE via dubboApi Debug Endpoint -critical TL;DR Weaver E-cology 10.0 prior to build 20260312 contains a critical unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint. Attackers can injec...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Server-side Template Injection POC for Vmware CVE-2022-22954 Use this one line GET request!! This will execute cat /etc/passwd...

TangledWinExec

Tangled WinExec This repository is for investigation of Windows process execution techniques. Most of PoCs are given a name corresponding to the technique. Projects BlockingDLL : This toolset is for testing blocking DLL process. See README.md. CloneProcess : This directory is for process forking...