struts2-rce-cve-2017-9805-ruby

Struts2 Vulnerability - CVE-2017-9805 Description Apache Struts2 REST Plugin XStream RCECVE-2017-9805 Usage Usage: cve20179805poc.rb targeturi cmd ruby cve20179805poc.rb 127.0.0.1 ping -c 4 192.168.0.1...

pfsense-ovpn-connect-eval

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ovpn-connect-eval pfsense-ovpn-connect-eval Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org openvpn.connectasync.sh eval "/sbin/pfctl -a '$anchorname' ..." with...

cve-2026-39987

cve-2026-39987 Installation • Usage • Examples I'm just trying out Go :D Btw: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended Custom Command -c: cve-2026-39987 -t...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP Remote Code Execution CVSS 10.0 Critical | Blind RCE | FlowiseAI Flowise = 2.2.7-patch.1 and = 2.2.7-pa...

CVE-2026-70553-PoC

CVE-2026-70553 - MaxSite CMS Unauthenticated RCE Proof-of-Concept for CVE-2026-70553: Unauthenticated Remote Code Execution in MaxSite CMS via persistent PHP code injection into database.php through the install endpoint. Disclaimer This PoC is for educational and authorized security research...

CVE-2023-27997-check

CVE-2023-27997 Vulnerability Assessment Tool Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing. See the full write-up at the Bishop Fox blog, including a complete walkthrough of the methodology behind this tool. Description CVE-2023-27997 ...

CVE-2024-38077-check

Vulnerability analysis asynchronous pdf file. My ability is limited, unable to achieve RCE yet. Please advise, masters. For vulnerability verification, just change the IP. if name == 'main': printlogo connecttolicenseserver"192.168.6.132"...

0day

0day For reasons known to us, the original repository was deleted, but local repo were kept, forks and stars cleared But rest assured, it's still the original recipe, the original taste. In case of this issue,please Follow Me Education use only 中文 | English EXP, POC of various CMS, platforms,...

CVE-2026-42945

CVE-2026-42945 Practical Risk Assessment Script A local risk assessment tool for CVE-2026-42945 Nginx Rift. Unlike simply telling you "version is affected so it's dangerous", this script checks the three conditions that truly determine risk layer by layer and gives a conclusion tailored to your...

thinkphp5.XRce

ThinkPHP5.0 Vulnerability Detection Script Rewritten based on @tdcoming's script Introduction: Affected versions: v5.1.x 5.1.31 v5.0.x = 5.0.23 Usage: 1. pip install -r requirements.txt 2. Create url.txt in the script directory 3. Put the URLs to be tested into it 4. Run the script Screenshot:...

fastjson-1.2.61-RCE

fastjson-1.2.61-RCE Ps： Officially, in https://github.com/alibaba/fastjson/blob/master/src/main/java/com/alibaba/fastjson/parser/ParserConfig.java, 0x7bddd363ad3998c6L i.e., 1.2.61 8925522461579647174 0x7bddd363ad3998c6L org.apache.commons.configuration.JNDIConfiguration was added to the blacklis...

wp2shell-lab

wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core: CVE| Component| Class| CVSS ---|---|---|--- CVE-2026-60137| WPQuery::authornotin| SQL...

php-rce

PHP Remote Code Execution Exploit for CVE-2026-109618 / CVE-2026-109619. Multiple exploits to achieve RCE on vulnerable PHP targets. Usage +beginsrc sh $ uv sync $ uv run php-rce --url http://target/index.php --cmd "hostname" target: http://target/index.php cmd: hostname trying sessionlfi...

CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE

CVE-2025-32433 - Erlang/OTP SSH RCE PoC Overview PoC showing unauthenticated remote code execution in Erlang/OTP SSH server. By exploiting a flaw in SSH protocol message handling, an attacker can execute arbitrary commands on the target without valid credentials. CVE: CVE-2025-32433 CVSS Score:...

drupalgeddon2-cli

drupalgeddon2-cli A command-line rewrite of the Drupalgeddon2 CVE-2018-7600 proof-of-concept, built as a study exercise while working through the Hack The Box Academy Attacking Common Applications module. !WARNING For authorised security testing and education only. Running this against systems yo...

cve-2022-23636-poc

CVE-2022-23626 - m1k1o's Blog Authenticated RCE Authenticated Remote Code Execution via file upload vulnerability in m1k1o's Blog v1.3 and below. Description The ajax.php?action=uploadimage endpoint does not properly validate uploaded file types, allowing an authenticated user to upload a PHP...

CVE-2022-33980

CVE-2022-33980 CVE Apache Commons RCE can use url,dns,script key-words to connect any server...

CVE-2025-24813-Scanner

CVE-2025-24813 Scanner A multi-threaded vulnerability scanner to detect Apache Tomcat servers vulnerable to CVE-2025-24813 arbitrary file upload leading to RCE. Description This scanner checks for Apache Tomcat servers vulnerable to CVE-2025-24813 by: 1. Attempting to upload a serialized Java...

pfsense-assign-if-add

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-assign-if-add pfsense-assign-if-add Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org interfacesassign.php Add stores $POST'ifadd' without $portlist membership. Submit remaps only por...

JavaSecLab

JavaSecLab - A Comprehensive Java Vulnerability Lab 中文文档 Overview JavaSecLab is a comprehensive Java vulnerability lab for application security learning, code audit practice, secure development training, and security tool evaluation. Built on Spring Boot, it provides vulnerable code, fixed...