CVE-2021-43297-POC

CVE-2021-43297 Vulnerability Description Apache Dubbo Hessian-Lite 3.2.11 and earlier versions contain a potential RCE attack risk. When Hessian-Lite encounters a serialization exception, it outputs related information, which may trigger the toString method of certain maliciously crafted Beans,...

Mailcow-CVE-2022-31138

Mailcow CVE-2022-31138 RCE and Domain Admin privilege escalation for Mailcow. POC for CVE-2022-31245 can be modified to work with this vulnerability. Reported and fixed: 2022-06 Code Injection, RCE Type: Code Injection CWE-94, RCE, Domain Takeover Affected versions: least 2019 - 2022-06a A flaw...

refresh

Refresh This container emulates the vulnerable functionality of CVE-2022-1388 in an F5 Router allowing RCE. CVE-202201388 stems from a complicated relationship between different authentication mechanisms and broxying that stripped Headers allowing improper access to admin endpoints in the webapp...

CVE-2024-36401

GeoServer Blind Remote Code Execution Vulnerability CVE-2024-36401 options: -h, --help show this help message and exit -u URL, --url URL Target URL; Example: python .py -u http://ip:port -f FILE, --file FILE Target urllist; Example: python .py -f urllist.txt -c CMD, --cmd CMD Target command;...

CVE-2025-14700-poc

CVE-2025-14700 POC Automatic exploit for Authenticated RCE in Crafty Controller --login --password --lhost --lport This script uses netcat to setup a listener after triggering the reverse shell payload, it won't work if you don't have netcat on your listener machine...

CVE-2026-23918

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Affected: httpd 2.4.66 with modhttp2 and multi-threaded MPM event/worker. Fixed in: 2.4.67. Found and reported by Bartlomiej Dmitruk striga.ai and Stanislaw Strzalkowski isec.pl. Writeup:...

CVE-2026-27971_POC

CVE-2026-27971 — Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...

confusploit

This is a Script to find vulnerable servers to CVE-2022-26134 and can be used together SHODAN CLI and Bash Scripting One-Liner Please use only for legal and educational purposes Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a...

CVE-2026-33017-langflow-rce

CVE-2026-33017 - Langflow Unauthenticated Remote Code Execution RCE Overview CVE ID: CVE-2026-33017 Affected Software: Langflow Vulnerable Versions: = 1.9.0 Severity: Critical Author: arensballiu Date: 2026 Description Langflow exposes a public flow build endpoint /api/v1/buildpublictmp/flowID/fl...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- This is a D-Link RCE vulnerability detection program Vulnerability Overview D-Link DNS-320, etc., are NAS Network Attached Storage devices from D-Link China. Multiple D-Link products have a security vulnerability, which stems from erroneous operations on the parameter...

CVE-2025-3248-Langflow-RCE

CVE-2025-3248 — Langflow Unauthenticated Remote Code Execution Proof-of-Concept exploit for CVE-2025-3248 , an unauthenticated remote code execution vulnerability in Langflow, an AI/LLM workflow-building platform. Affected versions: Langflow 1.3.0 Fixed in: 1.3.0 Vulnerability class:...

CVE-2024-22120-RCE-with-gopher

Usage python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hostid: 10107 PHP...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 single line bash PoC for GitLab preauth RCE CVE-2021-22205 t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

VmWare-vCenter-vulnerability

VMware Vulnerabilites VMware vCenter unauthorized arbitrary file read PoC working to Earlier versions 7.0.2.00100 Shodan Query for Private members only PoC CVE-2021-21972 PoC | VMware Unauthorized RCE CVE-2021-21972 PoC vmware ssrf poc | cve-2021-21975 poc cve-2021-21975 poc cve-2021-22005 poc |...

CVE-2023-4634

CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin 3.10 CVE-2023-4634 Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version 3.10. The exploit is not trivial and requires just a little setup explained bellow. Global...

CVE-2023-38646

Metabase Pre Authentication RCE CVE-2023-38646 We have provided two files:- CVE-2023-38646-POC.py for checking if any metabase intance is leaking setup-token. CVE-2023-38646-Reverse-Shell.py to get a reerse shell on the attacker controlled machine. CVE-2023-38646-POC.py...

pwn_jenkins

Remote Code Execution Jenkins CLI arbitrary read CVE-2024-23897 applies to versions below 2.442 and LTS 2.426.3 Jenkins Advisory, Credits Authenticated, can retrieve a complete file: java -jar jenkins-cli.jar -noCertificateCheck -s https://xxx.yyy/jenkins -auth abc:abc connect-node "@/etc/passwd"...

CVE-2026-102427

CVE-2026-102427 — OrdaSoft OS CCK comoscck unauthenticated upload RCE Python 3 PoC for CVE-2026-102427 — OrdaSoft Joomla CCK — unauthenticated RCE via task=getContent → site/uploader.php GIF/PHP polyglot, .php filename. | ---|--- CVE.org| https://vulners.com/cve/CVE-2026-102427 PUBLISHED 2026-09-...

Sophos-Vulnerability

Analysis of Vulnerability CVE-2022-1040 Sophos RCE In the research group Toasec, dedicated to offensive cybersecurity, we took on the task of analyzing this vulnerability in Sophos firewalls. This vulnerability, like many others, can be reported and found if you know how to search on Twitter, whe...

CVE-2025-43990-Magento-RCE

Magento APSB25-94 — Unauthenticated File Upload to RCE Overview Exploits unauthenticated file upload in Magento / Adobe Commerce via REST API guest cart customoptions file upload. Attack Chain 1. GraphQL → leak product SKU 2. REST API → create guest cart 3. REST API → upload PNG polyshell via...