775361 matches found
FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses
A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log SEL responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrar...
FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem
A flaw was found in FreeIPMI. A stack-based buffer overflow in the ipmi-oem utility can lead to arbitrary code execution. This vulnerability can be exploited by a local user who executes a specially crafted ipmi-oem command, potentially when processing untrusted data from a remote source...
CVE-2024-3094-analysis
CVE-2024-3094 – Real-World Supply Chain Threat What is CVE-2024-3094? CVE-2024-3094 is a major backdoor vulnerability discovered in the xz compression library. It allows attackers to potentially execute code remotely through SSH. The vulnerability was introduced intentionally and affects critical...
Project-Exploitation-of-Webmin-Authentication-Vulnerability
Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...
CVE-2026-7393-RCE
Pizzafy Ecommerce System 1.0 – Unrestricted File Upload in savemenu Leads to Remote Code Execution Details Field| Value ---|--- Vendor| SourceCodester Vendor URL| https://www.sourcecodester.com Product| Pizzafy Ecommerce System using PHP and MySQL Product URL|...
Atlassian_CVE-2022-26134
Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On May the 30th, 2022, an organisation named Volexity identified an un-authenticated RCE vulnerability scoring 9.8 on NIST within Atlassian's Confluence Server and Data Center editions...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP-FPM CVE-2026-109618 research lab This repository is a sel...
CVE-2019-7214
Windows Reverse Shell Exploit PowerShell over TCP This Python script targets a vulnerable service running on a remote Windows machine. It sends a serialized .NET payload that launches a PowerShell-based reverse shell back to the attacker's machine. CVE-2019-7214 Remote Code Execution in .NET...
CVE-2019-0708-RCE
CVE-2019-0708-RCE CVE-2019-0708-RCE We are working on a fully functional exploit join us https://discord.gg/4kc72bZ...
log4j2-issue-check
Evaluate the Log4Shell: RCE 0-day Issue This repo contains the code to evaluate Log4j2 issue CVE-2021-44228 More details https://www.lunasec.io/docs/blog/log4j-zero-day/ How to Test Send GET request with query parameter as $jndi:ldap://127.0.0.1:3089/...
CVE-2024-1212
CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...
PS-2018-002---CVE-2018-14442
Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on...
CVE-2021-26084_PoC
CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...
Apple-Safari-Remote-Code-Execution-CVE-2020-27930
This repository does not have a README...
CVE-2026-39808
🚨 FortiSandbox Root Sandbox Escape - CVE-2026-39808 🎯 Overview This repository contains a clean and well-documented Proof of Concept for CVE-2026-39808 — a critical unauthenticated command injection vulnerability in Fortinet FortiSandbox that allows sandbox escape and remote code execution as roo...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...
CVE-2020-15148-bypasses
CVE-2020-15148-bypasses Several bypasses for CVE-2020-15148 Yii2 deserialization poc1 This one is exploitable in version 2.0.37, fixed in 2.0.38, which was assigned CVE-2020-15148. The following three are bypasses. checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction...
CVE-2025-59287-WSUS-2
CVE-2025-59287 ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. CVE-2025-59287 is a critical remote code execution vulnerability in Microsoft Windows Server Update Services WSUS. It stems from unsafe deserializatio...
CVE-2024-48705
Overview During recent security research for the Wavlink AC1200 Model: WL-WN532A3 a Post-Authentication Command Injection Vulnerability was identified in the "/cgi-bin/adm.cgi" endpoint. This vulnerability could enable malicious actors who have compromise the credentials for the router, to run...