757208 matches found
CVE-2026-42533
CVE-2026-42533 — nginx two-pass capture clobbering Pre-auth heap overflow + info leak in nginx 0.9.6–1.30.3 / mainline ≤1.31.2 complex-value script engine; CVSS 9.2. Two trigger surfaces share the same root cause: HTTP regex location + regex map and stream sslpreread + SNI + regex map. In-depth...
CVE-2026-41179
CVE-2026-47668 Test environment for rclone RCE REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q REF2: https://github.com/pssec-io/CVE-2026-41179 rce.py RCE on /operations/fdinfo, redirects output to stderr for convenience ./rce.py uname -a exit status 1 Return code: ...
CVE-2024-4358
Telerik Report Server Authentication Bypass - CVE-2024-4358 Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicabl...
CVE-2021-23369
CVE-2021-23369 Handlebars CVE-2021-23369 Vulnerability pip install requests Enter the Url : Vulnerability Description The package handlebars before 4.7.7 are vulnerable to Remote Code Execution RCE when selecting certain compiling options to compile templates coming from an untrusted source...
CVE-2019-15642
CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root ⚡ root@jas50...
CVE-2015-1578-PoC
CVE-2015-1578-PoC Overview This is a proof-of-concept exploit for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This PoC is intended to serve as a clean, minimal, and well-structured...
nopowershell
NoPowerShell NoPowerShell هي أداة مطبَّقة بلغة C تدعم تنفيذ أوامر شبيهة بأوامر PowerShell مع بقائها غير مرئية لأي آليات تسجيل خاصة بـ PowerShell. يمكن تحميل هذه الثنائية المتوافقة مع .NET Framework 2 داخل Cobalt Strike لتنفيذ الأوامر في الذاكرة. لا يتم استخدام System.Management.Automation.dll؛ بل...
Blackash-CVE-2025-0282
Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...
CVE-2024-4577
CVE-2024-4577 - PHP CGI आर्गुमेंट इंजेक्शन RCE सारांश CVE-2024-4577 एक गंभीर PHP CGI आर्गुमेंट इंजेक्शन भेद्यता है जो विंडोज़ सिस्टम को प्रभावित करती है जहाँ PHP CGI मोड में चल रहा है। यह दोष दूरस्थ हमलावरों को विशेष रूप से तैयार URL के माध्यम से PHP की कमांड लाइन में आर्गुमेंट इंजेक्ट करने की...
CVE-2025-44608
CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...
botkube
Botkube is a messaging bot for monitoring and debugging Kubernetes clusters. Overview Botkube is a troubleshooting and monitoring solution that empowers DevOps teams to work more efficiently, enables developers to troubleshoot their applications without special Kubernetes access or knowledge, and...
Ofbiz-RCE
📌 Apache OFBiz RCE Exploit CVE-2024-38856 This Python script allows exploiting a Remote Code Execution RCE vulnerability in Apache OFBiz versions 18.12.15 through unauthorized access to the endpoint /webtools/control/forgotPassword/ProgramExport. 🛠️ Description CVE : CVE-2024-38856 Type : Incorrec...
CVE-2016-2098
CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage git clone...
Confluence-CVE-2022-26134
Confluence-CVE-2022-26134 Description Confluence unauthorize remote code execution vulnerability : CVE-2022-26134 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Da...
CVE-2017-7269
EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...
CVE-2019-19919
CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...
CVE-2020-7961
CVE-2020-7961 Exploit script for CVE-2020-7961 Unauthenticated Remote code execution via JSONWS References & inspirations original blogpost : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html synacktiv blogpost :...
CVE-2019-16278-Nostromo_1.9.6-RCE
CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...
pyrdp
PyRDP PyRDP एक Python रिमोट डेस्कटॉप प्रोटोकॉल RDP मॉन्स्टर-इन-द-मिडल MITM उपकरण और लाइब्रेरी है। इसमें कुछ उपकरण शामिल हैं: RDP Monster-in-the-Middle कनेक्ट होने पर उपयोग किए गए सादे पाठ क्रेडेंशियल्स या NetNTLM हैश को लॉग करता है क्लिपबोर्ड पर कॉपी किए गए डेटा को चुराता है नेटवर्क पर स्थानांतरि...