CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code v...

Log4Jolokia

Log4Jolokia Description: Python3 implementation for leveraging and exploiting Log4J MBeans over Jolokia Usage: Generic Help: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target target...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Discovered by Netanel Cohen and Tomer Peled a Security Researchers from BugSec. Description POC example to exploit Wondershare Dr.Fone . Dr.Fone is a phone toolkit develop by wondershare , and vulnerable to RCE. Only with network access we manage ...

mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE Lab Remote code execution on the unmodified, stock MariaDB 13.0.1-rc Docker image as uid 999 mysql. Two exploit variants: Variant| File| Requirements| Notes ---|---|---|--- Pure SQL recommended| exploitpuresql.py| a low-priv MariaDB account + TCP| no host access, no docker, ...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Description Confluence unauthorize remote code execution vulnerability : CVE-2022-26134 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Da...

nwn-exploit

Exploit Neverwinter Nights: Enhanced Edition This repository contains PoC to exploit Neverwinter Nights: Enhanced Editions. This blogpost details vulnerabilities and exploitation. Windows version: 10.0.19045.2965 Neverwinter Night Enhanced Editions: vulnerable version 88.8193.36-13 poc-server-1.j...

CVE-2023-50564-pluck

CVE-2023-50564-pluck CVE-2023-50564 An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. This is an authenticated vulnerability. Disclaimer: This code is meant for...

Unomi-CVE-2020-13942

CVE-2020-13942 Apache Unomi Remote Code Execution Vulnerability Script Vulnerability Overview Apache Unomi is an open-source Java data platform, a Java server designed to manage data of customers, prospects, and visitors, and to help personalize customer experiences. Unomi can be used to integrat...

EvilRip

Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

cve-2025-0133

CVE-2025-0133 Reflected XSS Detection Tool Author : Derek Odiorne Date : 2025-05-23 Severity : Medium Tested Against : Palo Alto Networks GlobalProtect Portal PAN-OS 📌 Summary This script performs safe, authorized testing for the vulnerability CVE-2025-0133 , a reflected Cross-Site Scripting XSS...

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

CVE-2023-45878

CVE-2023-45878 GibbonEdu Arbitrary File Write to Web Shell Execution Description This repository contains an exploit for CVE-2023-45878 , an arbitrary file write vulnerability in GibbonEdu. The vulnerability affects the rubricsvisualisesaveAjax.php endpoint and allows an unauthenticated attacker ...

CVE-2019-11043

CVE-2019-11043 Python exp for CVE-2019-11043 You can use build environment from https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 Usage： python3 main.py -u http://iptopage/index.php If you success, you will see: Base status code is 200 qsl:1760 with status code 502 The target maybe...

exploit-CVE-2015-1427

Elasticsearch 1.4.0 1.4.2 Remote Code Execution Elasticsearch is a distributed, RESTful search and analytics engine capable of solving a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data so you can discover the expected and uncover the unexpected...

cve-2019-0227

cve-2019-0227 Apache Axis 1.4 remote code execution vulnerability You need to set up a listener on the local machine with msf, and also modify lines 24-30 of the code. ＃You need to change these variables to match your configuration myip = “ 192.168.0.117 ” ＃Your machine's IP target = “...

CVE-2025-24893

CVE-2025-24893 XWiki Platform is a generic wiki platform that provides runtime services for applications built on top of it. Due to a vulnerability in the SolrSearch endpoint, an unauthenticated user can achieve arbitrary remote code execution. This vulnerability affects the confidentiality,...

cs50-cybersecurity-final-project

Technical Analysis of the XZ Utils Backdoor CVE-2024-3094 Video URL: https://www.youtube.com/watch?v=6hpVp7prlO8 Overview This repository contains the final project for CS50's Introduction to Cybersecurity. The project provides a thorough technical analysis of the supply chain attack on XZ Utils...

CVE-2024-28255

OpenMetadataRCE CVE-2024-28255 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试，任何非法攻击本人概不负责. Help Need to modify the DNS address in line 9 of the code. python3...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...