CVE-2020-9047

Usage/Help Menu usage: CVE-2020-9047.py -h -p RPORT -s LPORT --command -d WEBDIR -U USERNAME -P PASSWORD WINDOWS,LINUX,CHECK RHOST LHOST PAYLOAD Exploit for exacqVision Web Service as outlined in CVE-2020-9047. This program targets Windows and Linux x86 installations of exacqVision Web Service...

CVE-2021-21425

CVE-2021-21425 GravCMS Unauthenticated Arbitrary YAML Write/Update leads to Code Execution CVE-2021-21425 Reference : https://pentest.blog/unexpected-journey-7-gravcms-unauthenticated-arbitrary-yaml-write-update-leads-to-code-execution/...

CVE-2026-28609-matroska-pcm-oob

CVE-2026-28609 — Matroska PCM Out-of-Bounds Write Proof-of-concept, instrumented reproduction harness, and technical write-up for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track. At a glance CVE ID:...

CVE-2023-43208

RCE vulnerability in Mirth Connect CVE-2023-37679 and CVE-2023-43208 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. CVE-2023-43208 is a serious security bug in NextGen Mirth Connect, a tool used by hospitals and clinics to share patient data. This bug lets hacke...

CVE-2016-2434

CVE-2016-2434...

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/class" Description : A cross-site scripting XSS vulnerability in the component "/management/class" of School Fees Management System v1.0 allows attackers to execute...

CVE-2024-25600

CVE-2024-25600 Unauthenticated Remote Code Execution – Bricks Usage: python3 bricks.py Example: python3 bricks.py https://example.org reference: https://github.com/Chocapikk/CVE-2024-25600...

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Usage Reverse shell listener with Ncat root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft...

CVE-2025-55182

CVE-2025-55182 React Server Components Remote Code Execution CVE-2025-55182 and Next.js Remote Code Execution CVE-2025-66478. This vulnerability primarily affects the Server Actions functionality in react-server-dom-webpack. Due to missing security validation when parsing client-submitted forms, ...

CVE-2026-41089-Netlogon-RCE-PoC

🛡️ CVE-2026-41089 Netlogon Security Research & AI Security Tool Module Security Research • Defensive Validation • AI Security Tool Integration 🌐 Демо-версия • 📚 Сайт проекта • 💬 Чат сообщества Website navigation: Home • Updates • Downloads • Modules Official AI Security Tool module page 🧠...

imbyter-WinRAR_CVE-2023-38831

💥 WinRAR Vulnerability Description CVE-2023-38831 A spoofable file extension vulnerability exists in WinRAR versions prior to 6.23. Attackers can exploit this vulnerability by crafting specially packaged files that appear harmless, such as JPG .jpg image files, text files .txt, or PDF documents...

Oracle-WebLogic-CVE-2017-10271

WebLogic Wls-wsat XMLDecoder Vulnerability Description mitre:https://vulners.com/cve/CVE-2017-3506 Early on, hackers leveraged the WebLogic WLS component vulnerability to launch large-scale remote attacks against enterprise servers, resulting in a large number of compromised servers. The number o...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 One-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

CVE-2025-68722

CVE-2025-68722: Axigen WebAdmin CSRF Vulnerability Summary Critical state-changing actions in the Axigen WebAdmin interface are accessible via GET requests. While the h token protects against direct CSRF, the application processes queued requests via the s breadcrumb parameter immediately after a...

CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...

CVE-2017-11882

CVE-2017-11882 Overview From the perspective of exploit effectiveness, it can kill all versions of Office from 2003 to 2016, and the entire attack environment is very simple to build. This vulnerability is caused by the Equation Editor in Office software. Because the editor process does not...

cve-2022-22963

Spring Cloud Function SpEL - cve-2022-22963 Build $ git clone https://github.com/twseptian/cve-2022-22963.git $ cd cve-2022-22963 $ docker build . -t spring-spel-0day $ docker run -p 8080:8080 --name spring-spel-0day spring-spel-0day Payload...

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository contains a proof‑of‑concept exploit for CVE‑2025‑24367 , an authenticated remote code execution vulnerability in Cacti. The issue abuses insufficient input sanitization in graph template handling. By injecting malicious content into the...

CVE-2021-44228-playground

LOG4SHELL-CVE-2021-44228-Validator About This tool allows you to verify whether a simple Java web app is vulnerable to CVE-2021-44228 for a user provided version of Java and of Log4J. You can also optionally apply one of a view pre-defined mitigations. The simulation lab spun up by...

CVE-2024-41662

CVE-2024-41662 Markdown XSS leads to RCE in VNote version NOTE: The application properly validates some JavaScript payloads by performing output encoding in the app. However, it fails to validate in certain cases. 5. Further an attacker can achieve Remote Code execution using the following payloa...