792429 matches found
wmiexec-Pro
wmiexec-Pro New generation of wmiexec.py. Table of Contents 1. Info 2. Special thanks 3. Features 4. Getting Started Installation 5. Usage 6. Screenshots 7. How it works? 8. Disclaimer 9. References Info The new generation of wmiexec.py, more new features, whole the operations only work with port...
CVE-2022-26134
pip3 install -r requirements.txt use: python3 exp.py url "cmd" example: python3 exp.py http://192.168.1.1/ whoami...
dynamorio
DynamoRIO About DynamoRIO DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling,...
CVE-2025-58440
CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...
CVE-2023-22527
CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC Detect nuclei -v -t /path/to/template.yam; -u http://ip:port/ Exploit python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...
CVE-2022-26134
CVE-2022-26134 Remote attackers, without authentication, can construct OGNL expressions for injection, achieving arbitrary code execution on Confluence Server or Data Center. Modified PoC for easy get shell. Common port: 8090 Affected Versions Confluence Server and Data Center = 1.3.0 7.14.0 =...
SUSE-SU-2026:24518-1 Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287778...
Security update for brotli
This update for brotli fixes the following issue: CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287778. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
OPENSUSE-SU-2026:22213-1 Security update for brotli
This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287778...
CVE-2026-22812
š CVE-2026-22812 - OpenCode Unauthenticated HTTP Server ā Remote Code Execution RCE Security advisory, technical analysis, detection guidance, and mitigation notes for CVE-2026-22812 š Overview CVE-2026-22812 is a high-severity Remote Code Execution RCE vulnerability affecting OpenCode versions...
CVE-2025-47812-PoC
CVE-2025-47812 ā Wing FTP Server Remote Code Execution RCE Overview Field| Value ---|--- CVE| CVE-2025-47812 Affected| Wing FTP Server 7.4.4 Type| Unauthenticated Remote Code Execution CVSS Score| 10.0 Critical Fixed in| Wing FTP Server 7.4.4 How it works The vulnerability exists in the...
SeRestoreAbuse
SeRestoreAbuse Executes a command as SYSTEM when SeRestorePrivilege is assigned. In case it's disabled, the program will enable it for you. Usage: SeRestoreAbuse.exe "cmd /c ..."...
Exploit-CVE-2024-23897
Exploit-CVE-2024-23897 Run the Container docker run -p 8080:8080 --name vulnerable-jenkins -d jenkins/jenkins:2.441-jdk17 Check logs docker logs Fetch docker machines IP: docker inspect vulnerable-jenkins | grep IPAddress Exploitation Code: python3 exploit.py --target http://127.0.0.1:8080 --file...
POC_CVE-2025-29943_Write-what-where-Condition
StackWarp: PoC for CVE-2025-29943 Proof of concept for the StackWarp hardware vulnerability CVE-2025-29943 in AMD processors. This flaw allows an attacker with administrator privileges on a host hypervisor to manipulate the CPU pipeline configuration to corrupt the stack pointer within a SEV-SNP...
CVE-2024-24576-PoC
CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...
CVE-2023-38831-winrar-exploit
CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...
CVE-2025-60751
CVE-2025-60751 PoC for CVE-2025-60751 Affected product: Geographiclib = v2.5.1 The full writeup article is available at https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html Description A stack buffer overflow occurs when GeoConvert receives a crafted input. The overflow...
CVE-2025-50286
Grav CMS v1.7.48 / Admin Plugin v1.10.48 - Authenticated RCE via Plugin Upload CVE-2025-50286 Grav CMS v1.7.48 with Admin Plugin v1.10.48 is vulnerable to Remote Code Execution RCE via the "Direct Install" plugin upload feature, allowing authenticated administrators to execute arbitrary PHP code ...
CVE-2019-12744
CVE-2019-12744 Information Exploit Title: Remote Command Execution through Unvalidated File Upload in SeedDMS versions 5.1.11 CVE: CVE-2019-12744 Vendor Homepage: https://www.seeddms.org/index.php?id=2 Exploit Author: NobodyAtall Tested version: Seeddms 5.1.10, 5.0.11 Tested OS: Windows 7 x64...
CVE-2022-29464
CVE-2022-29464 WSO2 RCE CVE-2022-29464 Usage ā¢ This exploit can only be run for multi targets python3 exploit.py --file urls.txt References https://github.com/hakivvi/CVE-2022-29464...