CVE-2019-19781-DFIR-Notes

Based on a Splunk perspective. Below resources show that ingesting your logs is essential from proper analysis of the Indicators Of Compromise Never waste a good crisis...ingest all the logs! Impact / Root Cause: Remote pre-auth arbitrary command execution due to logic vuln i.e. reliable executio...

react2shell

React2Shell CVE-2025-55182 Next.js: CVE-2025-66478 Unauthenticated RCE in React Server Components Flight Protocol - PoC Exploit Description React Server Components Flight protocol deserialize attacker-controlled multipart/form-data without validating prototype-chain access. A single unauthenticat...

Exploit for Deserialization of Untrusted Data in Rockwellautomation Factorytalk_Assetcentre

FactoryTalk AssetCentre HTTP Remoting RCE PoC This repository...

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 & CVE-2025-31201 | iMessage Zero-Click RCE Chain Summary This repository documents research into a zero-click remote exploit chain affecting iOS 18.x and beyond. A malformed AMR audio file delivered via iMessage triggers: 1. Heap corruption in CoreAudio CVE-2025-31200 — in...

spring-boot-cve-2022-22965

= Spring Framework version override showcase This repository showcases how you can override the Spring Framework version of a Spring Boot 2.4-based application. Spring Boot 2.4.x is https://spring.io/projects/spring-bootsupportout of OSS support, the latest version is 2.4.13. It uses Spring...

parquet-rce-poc-CVE-2025-30065

CVE-2025-30065 This repository illustrates how to exploit CVE-2025-30065 and achieve remote class instantiation and trigger a network request from within the victim application i.e the JVM thereby achieving SSRF. The generated parquet in Malicious.java assumes that the class RCEPayload.java is...

CVE-2023-22884-Airflow-SQLi

Apache Airflow SQL injection PoC CVE-2023-22884 PoC for CVE-2023-22884 is an Apache Airflow RCE vulnerability affecting versions prior to 2.4.0. The official report description says: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software...

CVE-2025-20281-Cisco

CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...

CVE-2011-2523

vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...

CVE-2020-8163

CVE-2020-8163 Enviroment and exploit to CVE-2020-8163 Blind remote code execution of user-provided local names in Rails 5.0.1 and 4.2.11.2 Create the enviroment 1. create docker container mapping port 4000 to 8001 sudo docker run --rm -it -p 8001:4000 ruby:2.3 bash 2. update and install some tool...

CSRF-to-RCE-on-Backdrop-CMS

CSRF to RCE on Backdrop CMS 1.20 This PoC describe how to exploit CSRF on Backdrop CMS Version 1.20 with escalation to RCE. CVE ID CVE-2021-45268 Description The Backdrop CMS version 1.20 allows plugins to be added via ZIP files uploaded to the site. And because it does not have anti-CSRF...

PPPwn

PPPwn - PlayStation 4 PPPoE RCE PPPwn is a kernel remote code execution exploit for PlayStation 4 up to FW 11.00. This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation. Supported versions are: FW 7.00 / 7.01 / 7.02 FW 7.50 / 7.51 / 7.55 FW 8.00 / 8.01 /...

wakuwaku

AppleDog/Hooks This repository is part of a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during Git clone operations. This repository contains malicious hooks used to exploit this vulnerability. Overview For detailed explanations and descriptions of exploiting the...

CVE-2021-2302

CVE-2021-2302 Author: quynhle Gadget chain javax.management.BadAttributeValueExpException.readObject oracle.security.jps.az.internal.common.principals.toString oracle.security.jps.az.internal.common.principals.getResolvedPrincipal . . . con.newInstance...

Metabase-Pre-Auth-RCE-POC

CVE-2023-38646 — Metabase Remote Code Execution RCE Proof-of-Concept Overview This repository documents a Proof-of-Concept PoC security research project analysing CVE-2023-38646 , a critical pre-authentication Remote Code Execution RCE vulnerability affecting vulnerable versions of Metabase. The...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit ProxyShell/ProxyLogon, another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string...

Cisco-CVE-2025-20281-illdeed

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...

SMBGhost-WorkaroundApplier

SMBGhost Workaround Applier for CVE-2020-0796 - SMBv3 unauthenticated RCE This scanner has the ability to detect and apply the workaround in case your system is not patched yet. The Scanner is looking for the vulrability in your system only. You should run this script as administrator. Libraries...

CVE-2026-2441

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...