759446 matches found
CVE-2021-41773
CVE-2021-41773 โ PoC: Path Traversal + RCE via modcgi For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate and understand the vulnerability CVE-2021-41773 , present in Apache HTTP Server 2.4.49. The flaw reside...
CVE-2021-26855-exploit-Exchange
CVE-2021-26855 exploit-Exchange Auto Scan the World and auto exploit rce By EOG Team...
CVE-2022-0543
CVE-2022-0543 1.Introduction Redis Sandbox Escape Vulnerability CVE-2022-0543 POC&EXP 2.Usage RedisRCE -help ๆฅ็ๅธฎๅฉไฟกๆฏ RedisRCE -h 192.168.0.100:6379 ๆ ๅฏ็ ่ฟๆฅ //่พๅ ฅq้ๅบ็จๅบ RedisRCE -h 192.168.0.100:6379 -p 123456 ๅฏ็ ่ฟๆฅ 3.Disclaimer This tool is only for learning, research, and self-checking. It should not ...
rome-webshell
Rome WebShell A powerful and delightful PHP WebShell This is a lightweight PHP webshell , using only vanilla JavaScript and CSS, no jQuery/Bootstrap bloat. Features Fully interactive file explorer , browser directories and download files instantly Upload files directly from the browser Execute...
watchTowr-vs-SonicWall-PreAuth-RCE-Chain
SonicWall SMA 100 PreAuth RCE Chain PoC PoC for SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 See our blog post for technical details https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Action python watchTowr-vs-SonicWall-PreAuth-RCE-Chain....
CVE-2026-89196
A vulnerability exists in RUGGEDCOM CROSSBOW (all versions
CVE-2026-78557
The Industrial Edge App Publisher (all versions
CVE-2026-63356
Affected devices are vulnerable to a Cross-Site Scripting (XSS) flaw because they fail to properly sanitize calculated signal names from imported CSV trace files . If these names are included in error messages on the Trace page, an attacker could socially engineer an authorized user with "Read di...
CVE-2026-63355
Affected devices are vulnerable to Cross-Site Scripting (XSS) because they do not properly sanitize signal names within imported CSV trace files before rendering them in selection menus on the Trace page. An attacker could social engineer an authorized user with "Read diagnostics" rights into imp...
CVE-2026-63353
Affected devices are vulnerable to Cross-site Scripting (XSS) because they fail to properly sanitize comment fields within imported trace files before rendering them on the Trace page. An attacker could use social engineering to trick an authorized user with "Read diagnostics" rights into importi...
CVE-2026-63352
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right โRead diagnosticsโ into importing a specially crafted trace...
CVE-2026-63352
Affected devices fail to properly sanitize calculated signal data from imported CSV trace files before rendering it on the Trace page . This vulnerability allows an attacker to perform a social engineering attack to trick an authorized user with "Read diagnostics" rights into importing a maliciou...
CVE-2026-63351
Affected devices fail to properly validate and sanitize visual properties of calculated signals within imported CSV trace files before rendering them on the Trace page. This vulnerability allows an attacker to use social engineering to trick an authorized user with "Read diagnostics" rights into ...
CVE-2026-63351
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right โRead diagnosticsโ into...
VMDragonSlayer
VMDragonSlayer Project will be public by mid-October Refactoring In Progress Advanced Virtual Machine Detection and Analysis Framework VMDragonSlayer is a comprehensive framework for analyzing binaries protected by Virtual Machine VM based protectors such as VMProtect 2.x/3.x, Themida, and custom...
CVE-2026-25253
CVE-2026-25253 OpenClaw 1-Click RCE โ CVE-2026-25253 OpenClaw 1-Click Remote Code Execution PoC โ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Description CVE-2026-25253 : OpenClaw Authentication Token Exfiltration Vulnerability description: OpenClaw aka clawdbo...
CVE-2024-23692-RCE-in-Rejetto-HFS
Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...
CVE-2024-31317-PoC-Deployer
CVE-2024-31317-PoC-Deployer A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices. ๐ Project Description CVE-2024-31317-PoC-Deployer is an automated deployment script for quickly generating and configuring all the files required for exploiting...
Safer_PoC_CVE-2022-22965
SaferPoCCVE-2022-22965 A Safer PoC for CVE-2022-22965 Spring4Shell Functionality Creates a file called CVE2022-22965exploited.txt in the tomcat directory 'webapps/ROOT' Option user argument to change the output directory Exploit validation is performed by requesting the output .txt file, dependin...
CVE-2022-26134
CVE-2022-26134 Confluence OGNL expression injected RCECVE-2022-26134 poc and exp Update Add sandbox bypass, high version supported. Usage Usage: python Confluencecve202226134RCE.py http://example.com/ The script will auto check target is vulnerable, and enter a pseudo-interactive shell if it's...