CVE-2025-24813

🚨 CVE-2025-24813 – Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. 🔥 This exploit demonstrates how an attacker...

CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-49606:...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

CVE-2019-0708

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Technical details: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Metasploit Module The Metasploit module has been pulled to rapid7:master. msf5 use...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604 File Creation Extension Bypass which leads to RCE. The current exploit is made in Python 3 and exploits the vulnerability to upload a webshell which allows the remote execution of commands in the...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulnerability through the CLI can lead to RCE Products and Versions affected: Product| Affected Versions ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS: CRITICAL Actively Exploited: YES Patch: YES Mitigation: YES Help usage: CVE-2024-23897.py...

Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter

Nuclei Template Exploit F5 BIG-IP iControl REST Auth Bypass RCE | Command Parameter CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of...

EvilRip

Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...

Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC This package allows: 1. Upload webshell to SharePoint 2. Extract ValidationKey 3. Generate signed ViewState 4. RCE via reverse/bind shell 🔧 Setup git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Running Upload the webshell From a SharePoint...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution RCE in Apache Tomcat. This vulnerability works on versions 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81. Tested only on 8.0.24. Vulnerability uses misconfigured PUT option on the...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder = 2.5.1 - Local File Inclusion LFI Exploit Overview CVE-2025-2294 affects the Kubio AI Page Builder plugin for WordPress versions up to and including 2.5.1. It suffers from an unauthenticated Local File Inclusion LFI vulnerability via the...

cve-2021-42013-docker-lab

CVE-2021-42013 Introduction It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not...

CVE-2022-31626

CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following command cd...

CVE-2019-16172

CVE-2019-16172 The CVE-2019-16172 Scanner is designed to check LimeSurvey instances for the stored XSS vulnerability. CVE Descriptions CVE-2019-16172 Description: CVE-2019-16172 is a stored XSS vulnerability found in LimeSurvey versions prior to 3.17. The vulnerability arises due to improper...

CVE-2025-53770

Divine Absolute - CVE-2025-53770 Exploit Tool Overview Divine Absolute is a sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770 , a critical CVSS 9.8 unauthenticated remote code execution RCE vulnerability in on-premises Microsoft SharePoint Server 2016, 2019, Subscription...

CVE-2021-25646-exp

CVE-2021-25646-exp Apache Druid CVE-2021-25646 herramienta de detección y explotación de ejecución remota de código Ingrese un nombre de dominio o IP:puerto para realizar la detección de vulnerabilidades Se puede ejecutar comandos en los objetivos vulnerables detectados Admite un solo objetivo...

CVE-RCE

This repository does not have a README...

CVE-2023-28343

CVE-2023-28343 Altenergy Power System Control Software settimezone RCE Vulnerability CVE-2023-28343 Chinese name: Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） CVSS core:9.0 Description : Altenergy Power System Control Software is a microinverter control software fr...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...