305432 matches found
CVE-2024-10542
Poc Of CVE-2024-10542 and CVE-2024-10781 Broken Authentication in Spam protection, AntiSpam, FireWall by CleanTalk Plugin = 6.43.2 Disclaimer: The information provided in this document regarding for CVE-2024-10542 is for learning and educational purposes only. We do not encourage or authorize the...
CVE-2022-30190-Follina-Lab
๐ด CVE-2022-30190 โ Follina MSDT RCE Lab Researcher: Abhimanyu Rawat Role: Technical Research & Cyber Security Operations Intern Date: May 8, 2026 ๐ What is Follina? CVE-2022-30190 nicknamed "Follina" is a zero-day Remote Code Execution RCE vulnerability in Microsoft Windows that allows an attacke...
cve-2021-41773
CVE-2021-41773 CVE-2021-41773: Vulnerabilidad de dรญa cero de Path Traversal explotada en Apache HTTP Server Apache HTTP Server CVE-2021-41773 explotado activamente en ataques reales CVE-2021-42013: Path Traversal y ejecuciรณn remota de cรณdigo en Apache HTTP Server 2.4.49 y 2.4.50 correcciรณn...
cve-2022-24112
Apache APISIX 2.12.1 Remote Code Execution and Docker Lab Let's clone using gitclone this repository, then we can navigate to apisix-docker/examples. In this docker-compose.yml file, we already change into image: apache/apisix:2.12.0-alpine, because the vulnerability in this version, then let's...
Node.js-CVE-2017-5941
NodeJS Insecure Deserialisation Vulnerability Demo Node.js is an open-source runtime environment used to implement server functionality in JavaScript. A specific software package within Node.js contains a vulnerable function dealing with deserialisation, that causes it to run unauthorised command...
ds3-nrssr-rce
Update: Dark Souls III 1.15.1 A new game update, 1.15.1, has been released for Dark Souls III on 2022/08/25, along with the restoration of online services. This update fixed both CVE-2022-24125 and CVE-2022-24126 , along with a wide variety of other potential security vulnerabilities present in t...
bluekeep
CVE-2019-0708 aka Bluekeep Scanner A simple scanner to determine system vulnerability to CVE-2019-0708. This is a Python port of the original metasploit module scanner by JaGoTu and zerosum0x0, available on Github here. Proof of Concept Proof of concept RCE via exploitation of the Bluekeep...
CVE-2025-55182-Simple-Scanner-main
CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...
cve-2019-19781
CVE-2019-19781 Esto se subiรณ รบnicamente porque otros investigadores publicaron su cรณdigo primero. Habrรญamos preferido mantenerlo oculto por mรกs tiempo mientras los defensores tenรญan tiempo adecuado para parchear sus sistemas. Estamos a favor de la divulgaciรณn responsable; en este caso, el gato ya...
php-cgi-cve-2024-4577
php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 A remote code execution vulnerability occurring in CGI mode of PHP language registered in the detection of PHP-CGI CVE-2024-4577 Argument Injection events from external IPs to internal servers. This is an event that occurs when PHP is executed in CGI mo...
cve-2023-34960
cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...
Log4shell
Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...
CVE-2019-19781
This article is about CVE-2019-19781, a Remote Code Execution RCE vulnerability due to Directory Traversal in Citrix ADC and Gateway. This remote code execution vulnerability occurs because the validation of the smb.conf file under the /vpn path's ../vpns is not properly performed. Steals system...
CVE-2018-7600.
IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...
nmap_draytek_rce
nmapdraytekrce nmap script to detect CVE-2020-8515 on Draytek Devices...
CVE-2022-27925-Revshell
Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925 / / / / / / / / / / / / / // / / / / / / // / / / // / //// // //.// ,/ CVE-2022-27925 usage: exp.py -h -t TARGET -m MASS -l LHOST -p LPORT options: -h, --help show this help message and exit -t TARGET, --target TARGET URl with...
SSH-key-and-RCE-PoC-for-CVE-2021-41773
SSH Key and RCE PoC for CVE-2021-41773 This repository contains a Proof-of-Concept PoC for CVE-2021-41773. This CVE exposes a Local File Inclusion LFI and Remote Code Execution RCE vulnerability. Installation Ensure you have Go version 1.23.0 installed. Build the exploit binary with the following...
CVE-2023-4169_CVE-2023-3306_CVE-2023-4415
Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G backend remote code execution vulnerability CVE-2023-3306 2. CVE-2023-4169 unauthorized arbitrary password modification CVE-2023-4169 3. Ruijie RG-EW1200G login bypass CVE-2023-4415 Attention I developed a tool for local...
CVE-2025-55182
React2Shell CVE-2025-55182 - Proof of Concept A comprehensive proof-of-concept exploit and educational resource for CVE-2025-55182, a critical remote code execution vulnerability affecting React Server Components with a CVSS score of 10.0. Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED TESTING...
tomcat-cluster-session-sync-exp
ๅทฅๅ ทไป ็จไบๅฎๅ จ็ ็ฉถไปฅๅๅ ้จ่ชๆฅ๏ผ็ฆๆญขไฝฟ็จๅทฅๅ ทๅ่ตท้ๆณๆปๅป๏ผ้ ๆ็ๅๆไฝฟ็จ่ ่ด่ดฃ tomcat cluster sync-session ๅฉ็จexp ่ฟๆฏไธไธชtomcatไฝฟ็จไบ่ชๅธฆsessionๅๆญฅๅ่ฝๆถ๏ผไธๅฎๅ จ็้ ็ฝฎ๏ผๆฒกๆไฝฟ็จEncryptInterceptor๏ผๅฏผ่ดๅญๅจ็ๅๅบๅๅๆผๆด๏ผ้่ฟ็ฒพๅฟๆ้ ็ๆฐๆฎๅ ๏ผ ๅฏไปฅๅฏนไฝฟ็จไบtomcat่ชๅธฆsessionๅๆญฅๅ่ฝ็ๆๅกๅจ่ฟ่กๆปๅปใ ไฝฟ็จ ๅ ็ผ่ฏๅบjarๅ ๏ผ mvn clean compile assembly:assembly ็ๆjarๅ ๅญๅจไบtarget็ฎๅฝไธ ไฝฟ็จ๏ผไพ๏ผ java -jar...