telerik-scanner-CVE-2019-18935

Telerik CVE-2019-18935 Vulnerability Scanner A Python-based security scanner designed to detect the Telerik UI for ASP.NET AJAX Remote Code Execution vulnerability CVE-2019-18935. 🚨 Vulnerability Details CVE : CVE-2019-18935 Risk Level : HIGH CWE : CWE-913 CVSS : 9.8 Critical Description Telerik ...

cve-2021-25646

Apache Druid Remote Code Execution Vulnerability Summary Apache Druid has released a security update announcing a remote code execution vulnerability, numbered CVE-2021-25646. Due to the lack of authorization and authentication by default in Apache Druid, attackers can send specially crafted...

CVE-2017-12149

CVE-2017-12149 Coded by 1337g Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947EXP,CVE-2022-22947RCE Usage Reverse Shell python3 CVE-2022-22947.py 目标网址 弹shell的IP 端口 Execute Command python3 CVE-2022-22947.py 目标网址 命令...

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit This script is written to improve this PoC script https://github.com/zerosum0x0/CVE-2019-0708 rdesktop binary was taking too long to timeout so i want it to timeout quicker Multiple ip scan was not possible now you can scan a given ip list Example Ru...

LuCI_RCE_exp

EXP of CVE-2019-12272 CVE-2019-12272 is a vulnerablity of LuCI to execute arbitrary bash code. Details https://hachp1.github.io/posts/Web%E5%AE%89%E5%85%A8/20190710-lucirce.html Usage python .\cve-2019-12272bandwidthstatus.py -a 192.168.153.4 -u root -p root -c ls python...

mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE

CVE-2025-47175 - Microsoft PowerPoint Use-After-Free UAF Remote Code Execution PoC Overview This repository contains a Proof of Concept PoC exploit for the CVE-2025-47175 vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free UAF bug that allows an attacker to execute...

CVE-2022-0324

cve-2022-0324 https://ngtuonghung.github.io/pwn/cve-reproduction/cve-2022-0324/...

CVE-2025-34299-lab

CVE-2025-34299 Test Environment Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Authentication Remote Code Execution vulnerability. Vulnerability Details Field| Value ---|--- CVE ID| CVE-2025-34299 Severity| Critical CVSS 9.8 CWE| CWE-434 Unrestricted Upload of File with Dangerous Typ...

POC-CVE-2026-19286

Description Proof of concept exploit code for CVE-2026-19286 Usage python3 poc.py -url -uname -pword -c...

PoC---CVE-2023-26482-RCE-LAB-Nextcloud

Next cloud Proof of Concept & Analysis Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...

CVE-2022-46169-Cacti-v1.2.22-RCE

CVE-2022-46169-Cacti-v1.2.22...

secure-by-default-rce-demo

Node.js RCE Mitigation: DevOps as the Last Line of Defense This project demonstrates a critical Remote Code Execution RCE vulnerability in a Next.js application specifically via Server Actions and how infrastructure hardening effectively neutralizes the attack even when the code vulnerability...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Proof-of-concept exploit for CVE-2026-48908 , a critical CVSS 4.0 = 10.0 unauthenticated remote-code-execution vulnerability in the SP Page Builder component comsppagebuilder for Joomla, by JoomShaper. | ---|--- CVE| CVE-2026-48908...

CVE-2026-100570

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2025-55182-Exploit

React2Shell CVE-2025-55182 - Docker Vulnerable Lab An intentional vulnerable Next.js application demonstrating Remote Code Execution RCE via insecure Child Process handling. This lab is designed for educational purposes and security testing. ⚠️ WARNING: DOT NOT RUN THIS ON A PUBLIC FACING SERVER...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

CVE-2024-39840-POC

adapted from writeup: https://memorycorruption.net/posts/rce-lua-factorio/ works on factorio 1.1.86...

CVE-2026-13157

CVE-2026-13157 Theme Demo Import false durante el procesamiento de la carga. Un usuario autenticado con capacidades de importación —como un administrador de sitio predeterminado o un administrador de sitio no superadministrador en una arquitectura WordPress Multisite— puede omitir la aplicación d...

Cups-RCE-Exploit

CUPS RCE Exploit - CVE-2024-47176 Chain What It Is A fully functional proof-of-concept exploit targeting the CUPS Common Unix Printing System remote code execution vulnerability chain discovered in September 2024. This chain consists of four CVEs — CVE-2024-47176, CVE-2024-47076, CVE-2024-47175,...