20370 matches found
Weblogic_CVE-2020-2883_POC
POC for weblogic CVE-2020-2883 poc1: javax.management.BadAttributeValueExpException.readObject com.tangosol.internal.sleepycat.persist.evolve.Mutations.toString java.util.concurrent.ConcurrentSkipListMap$SubMap.size java.util.concurrent.ConcurrentSkipListMap$SubMap.isBeforeEnd...
wp2shell-detect
wp2shell-detect Blackbox, non-intrusive detector for wp2shell — the pre-authentication RCE chain in WordPress core disclosed on 2026-07-17: CVE-2026-63030 — route confusion in the REST batch endpoint /wp-json/batch/v1: a sub-request whose path fails wpparseurl lands in the validation array but no...
ksmbd-n-day
README This repo accompanies my research article Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days, in which I develop a POC for n-days from 2023: CVE-2023-52440 and CVE-2023-4130. I provide the kernel .config, a kernel run script, an image build script, and the POC. The...
Homework-of-Python
Homework-of-Python Python codes of my blog. pptppasswordhack.py Use Brute-force attack to get the password of PPTP VPN. It'll read the passwords in filenamed wordlist and then use pptpsetup to connect to the server. The time interval is 10 seconds. portscan.py Use to scan port. The timeout is 3...
CVE-2023-26035
CVE-2023-26035 Unauthenticated RCE in ZoneMinder Snapshots - PoC Exploit alt img Description ZoneMinder versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution due to missing authorization checks in the snapshot action. Usage git clone...
POC_react2shell_CVE-2025-55182
Next.js React Server Components RCE Exploit Exploits CVE-2025-55182 for remote code execution via prototype pollution. Author: Severian N.K. Description This tool exploits a prototype pollution vulnerability in Next.js applications using React Server Components, leading to Remote Code Execution...
regreSSHion-Checker
OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightweight, non-intrusive Python tool designed to check if remote SSH servers are vulnerable to critical OpenSSH exploits. It extracts and parses SSH banners to detect vulnerable versions and factors in OS-specific security backports specifical...
wp2shell-scan
wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...
active-scan-plus-plus
ActiveScan++ ActiveScan++ extends Burp Suite's active and passive scanning capabilities. Designed to add minimal network overhead, it identifies application behaviour that may be of interest to advanced testers: Potential host header attacks password reset poisoning, cache poisoning, DNS rebindin...
CVE-2026-39987
⚠️ CVE-2026-39987 — Unauthenticated Shell in marimo 0.23.0 A reactive Python notebook tool gave attackers a full shell in one WebSocket request. 📌 Overview CVE-2026-39987 is a critical pre-auth RCE vulnerability in marimo — a popular open-source reactive notebook for Python modern Jupyter...
CVE-2026-58138-Conductor-Unauth-RCE
CVE-2026-58138 — Conductor Unauthenticated RCE via INLINE GraalVM Evaluator Conductor OSS / Orkes3.21.21 … before 3.30.2 evaluates user-supplied JavaScript in INLINE and LAMBDA / DOWHILE / SWITCH tasks with a GraalVM context built with full host access HostAccess.ALL. The script reflects up to...
postgres-bruteforcer
postgres-bruteforcer About This Go script reads a list of usernames and passwords from a file called creds.txt and tests them against a PostgreSQL database. The script accepts an IP of the PostgreSQL server as a command line argument or a text file of ip's. If an access is granted, the script...
CVE-2022-42475-RCE-POC
CVE-2022-42475-RCE-POC 漏洞名称 CVE-2022-42475 Fortinet RCE Vulnerability POC 漏洞成因 Due to a validation flaw in user input by sslvpnd, an unauthenticated attacker can trigger a buffer overflow by sending specially crafted packets, ultimately achieving arbitrary code execution on the target system. 受影响...
evilact
evilact Fast vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. Supports bulk scanning, RCE confirmation, and high-performance concurrent checks. Install git clone https://github.com/cypholab/evilact.git cd evilact go build -o scanne...
CTT-enhanced-VMware-vCenter
CTT-enhanced-VMware-vCenter Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 CVSS 9.8 as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements. 🔥 What This CTT Enhancement Actually Does: 1...
ofbiz-CVE-2023-49070-RCE-POC
ofbiz-CVE-2023-49070-RCE-POC This is a pre-auth RCE POC For CVE-2023-49070 which affected Apache ofbiz applications wget https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar Dns POC RCE POC This tweets helped me alot :...
CVE-2023-6702
Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace CVE-2023-6702 Summary This vulnerability allowed a remote attacker to execute arbitrary code inside the Chrome renderer process. There was an insufficient type check in the async stack trace handling code. It leads to a type confusi...
CVE-2021-26084
CVE-2021-26084 Atlassian Confluence Pre-Auth RCE...
honeypot-dlink-CVE-2024-3273
honeypot-dlink-CVE-2024-3273 Quick and dirty honeypot for CVE-2024-3273. This template can be used to setup a basic honeypot in 10min. TL;DR: Find fofa, shodan, onyphe, .... Clone it with the wgetclonehttp.sh. Manual tinkering to make the honeypot more realistic cloning isn't perfect so some file...