CVE-2019-11447-EXP

CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability Before run the python script, run the nc command firstly. The default port is 1234. Then execute exploit.py, follow the tips and input required contents...

Commvault-CVE-2025-34028

CVE-2025-34028 Commvault Remote Code Execution CVE-2025-34028 NSE How to run in Nmap: nmap -p443 --script CVE-2025-34028 --script-args='https-ports=443'...

CVE-2023-46747

CVE-2023-46747 An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs This is an script indented forto exploit the Remote code Execution on Vulnerable f5-BIG Ip products Installation: git clone...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

CVE-2025-49113-nuclei-template

Nuclei vulnerability detection template - CVE-2025-49113 - Roundcube ≤ 1.6.10 Post-Authentication Remote Code Execution CVE ID: CVE-2025-49113 Severity: Critical CVSS 10.0 Discovered by: Kirill Firsov FearsOff Date Disclosed: June 1, 2025 Fixed in: Roundcube 1.6.11 / 1.5.10 LTS -...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

Exploit-CVE-2024-31777

CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestricted File Upload PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-31777, a security vulnerability discovered in GUnet OpenEclass E-learning platform with a CVSS of 9.8 which affects the endpoint of...

hook

This repository does not have a README...

CNVD-C-2019-48814

CNVD-C-2019-48814 WebLogic wls9-async Deserialization Remote Command Execution Vulnerability Echo PoC for WebLogic Patch update: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html Vulnerability Reproduction: http://10.10.20.166:7001/async/AsyncResponseService cu...

cve-2019-6340-bits

cve-2019-6340-bits Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE modsec rule pcap example nginx config example logs example playbook...

Ctirix_RCE-CVE-2019-19781

CtirixRCE-CVE-2019-19781 Citrix ADC RCE cve-2019-19781 Video Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600-Drupal-RCE...

CVE-2021-3129

CVE-2021-3129 Laravel debug mode - Remote Code Execution RCE https://vulners.com/cve/CVE-2021-3129 https://www.ambionics.io/blog/laravel-debug-rce https://github.com/ambionics/phpggc Example python3 exploit.py http://127.0.0.1:8080 python3 exploit.py http://127.0.0.1:8080 --phar $php -d...

SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...

text4shell

text4shell A demonstration of CVE-2022-42889 text4shell remote code execution vulnerability. Details in Don't Panic!: CVE-2022-42889 Text4shell vulnerability in Apache Commons Text...

Flink_RCE

Apache Flink Web Dashboard Unauthorized Access, Uploading Malicious jar Leads to Remote Code Command Execution msf nc python usage: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - Reflected XSS Vulnerability in HotelDruid 3.0.7 Description Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint Severi...

CVE-2020-6287_RECON-scanner

Vulnerability Assessment and Indicator of Compromise IoC Scanner for CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver is a critical CVSSv3 10 vulnerability affecting a number of SAP business and technical applications running on top of the SAP NetWeaver Java stack. This...

fastjson-RCE

fastjson-v1.2.47-RCE Vulnerability Reproduction fastjson-1.2.47 == Resource Download: 下载 http://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.47/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/archive/1.2.47.zip jar...

fastjson-1.2.60-rce

Fastjson = 1.2.60 Deserialization Vulnerability By Pass autoType Block List with 2 Gadgets JNDIConfiguration, OracleManagedConnectionFactory Gadgets 经过测试，命中的4个文件都是可以利用的。 不过其中HikariConfig类就是前文提到的类，在最新版本被加入黑名单，JNDIConnectionPool类在42版本前就被加入黑名单了。 另外的两个类JNDIConfiguration和...