CVE-2022-27925

CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...

CVE-2021-3156-without-ip-command

CVE-2021-3156-without-ip-command fork of worawit/CVE-2021-3156 exploitnss.py modified to work with ifconfig instead of the ip command wget https://github.com/Bad3r/CVE-2021-3156-without-ip-command/raw/refs/heads/main/exploitnss.py or wget https://cdn.unsigned.sh/exploitnss.py...

gpp-encrypt

gpp-encrypt Description This little script encrypts password to gpp cpassword. It useful to create vulnerable lab AD. Requirements This package require: python3 python3 Standard Library Installation git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd "gpp-encrypt" python3 -m pip...

astDoS

astDoS Tool to exploit CVE-2018-7284 and CVE-2018-19278 Usage This tool is used as a command. astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION DoS attack against Astersisk, CVE-2018-7284 and CVE-2018-19278 optional arguments: -h, --he...

CVE-2017-12611_Exploit

CVE-2017-12611 Project Overview: A RCE attack is possible with the given payload. Environment & Tools The following lists the environments and tools for testing and validation in an isolated, personal lab. Host OS : Ubuntu 18.04.6 Attacker OS : Kali Linux Container Platform : Docker Target...

Chamilo-LMS-CVE-2023-4220-Exploit

Chamilo LMS CVE-2023-4220 Exploit Overview This script exploits a Remote Code Execution RCE vulnerability in Chamilo LMS versions ≤ v1.11.24. The vulnerability CVE-2023-4220 exists due to unrestricted file upload functionality in the bigUpload.php feature of Chamilo LMS, which allows attackers to...

CVE-2020-36842

CVE-2020-36842 CVE-2020-36842 - WPvivid Plugin Arbitrary File Upload Vulnerability Overview CVE ID: CVE-2020-36842 Disclosure / Update Date: October 16, 2024 Affected Plugin: WPvivid - Migration, Backup, Staging Affected Versions: Up to and including 0.9.35 Vulnerability Type: Arbitrary File Uplo...

poc-cve-next

PoC for Next.js Vulnerability. Credits where credits are due. This was written in go but I got inspiration from: github.com/namest504/CVE-2025-66478 For more info visit that repo. Cheers! Disclaimer This code is provided for security research and educational purposes only. Using this tool against...

CVE-2020-14882

Oracle WebLogic Unauthenticated RCE Exploit This PowerShell script exploits CVE-2020-14882 to achieve unauthenticated remote code execution on Oracle WebLogic Server versions: 10.3.6.0.0 12.1.3.0.0 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 Usage .\exploit.ps1 -target 'https://target:7001' -command...

CVE-2021-32161

..| XSStoCommandInjection2 |.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to get a Command Injection through the Webmin's File Manager feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Command Execution eXploit's C0de P...

WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

WonderCMS 4.3.2 XSS to RCE Exploits Overview These scripts exploit an XSS Cross-Site Scripting vulnerability in WonderCMS 4.3.2 to achieve Remote Code Execution RCE. The XSS payload, when triggered by the admin, automatically installs a reverse shell on the target server by leveraging a crafted...

CVE-2025-2812

CVE-2025-2812 — SQL Injection Vulnerability in "Bilet Satış Otomasyonu" by Mydata Bilişim Ltd. Şti 📌 CVE-ID: CVE-2025-2812 📢 USOM Announcement: tr-25-0099 🛡️ Vulnerability Type: CWE-89 - SQL Injection Boolean-based Blind 🏢 Affected Product: Bilet Satış Otomasyonu – Mydata Bilişim Ltd. Şti 🌐 Exampl...

traitor

Traitor Sfrutta automaticamente i frutti a portata di mano per ottenere una shell di root. Elevazione dei privilegi Linux resa semplice! Traitor racchiude una serie di metodi per sfruttare configurazioni errate e vulnerabilità locali al fine di ottenere una shell di root: Quasi tutti i GTFOBins...

Cloudmare

Cloudmare Cloudmare is a simple tool to find the origin servers of websites protected by Cloudflare, Sucuri, or Incapsula with a misconfigured DNS. For more details about this common misconfiguration and how Cloudmare works, send me a private message. Here's what Cloudmare looks like in action. T...

drupalgeddon2

drupalgeddon2 Exploit for CVE-2018-7600. Usage: drupalgeddon2 options -h: Url target -c: OS command Examples: drupalgeddon2.py -h http://www.victim.com -c 'ls -la' Based in https://github.com/FireFart/CVE-2018-7600...

CVE-2023-47218

CVE-2023-47218 CVE-2023-47218: Inyección de comandos no autenticada en QNAP QTS y QuTS Hero CORREGIDO PoC POST /cgi-bin/quick/quick.cgi?func=switchos&todo=uploaffirmwareimage HTTP/1.1 Host: 192.168.86.42:8080 User-Agent: Mozilla Macintosh Accept: / Content-Length: 164 Content-Type:...

POC-CVE-2023-32681

POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...

CVE-2026-25243-debugfree

CVE-2026-25243 — DEBUG-free Redis RCE private Reliable remote code execution from a single crafted RESTORE on jemalloc Redis — noDEBUG command, no /proc, no gdb, no ROP, ASLR on. Runs the attacker's command as the redis process root in default images. 🔒 Private repository — authorized security...

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner A full-featured exploitation utility for CVE-2025-55182 — Remote Code Execution via React Server Components in Next.js. The scanner automatically crafts the multipart payload and abuses process.mainModule.require'childprocess'.execSync to achieve arbitrary OS comma...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows 📌 Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...