319775 matches found
CVE-2021-41773-RCE
CVE-2021-41773-RCE...
Log4j2-CVE-2021-44228
CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web mvn dependency:treejava INFO | | +- org.springframework.boot:spring-boot-starter-logging:jar:2.6.1:compile INF...
CVE-2024-1651-PoC
CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...
CVE-2025-48384
CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...
CVE-2022-47966
CVE-2022-47966 ManageEngine RCE 2022 This repo is part of the hgrab-framework Installation Install the app on the server user@domain: git clone https://github.com/sh4den/CVE-2022-47966.git user@domain: cd ./CVE-2022-47966/ user@domain: python3 main.py The list file must contain the targets server...
CVE-2025-59528
CVE-2025-59528: Flowise CustomMCP Remote Code Execution PoC A Go proof of concept for CVE-2025-59528 targeting Flowise versions Example go run main.go http://target.com h3D9jD7Xzi0V2KSrld9ff4P3rm6cuNXg1uA-wFsUYc "touch /tmp/pwned"...
cve-2022-42889-text4shell
Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...
CVE-2024-0012_CVE-2024-9474_PoC
🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...
WhatsPayloadRCE
WhatsPayloadRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? sudo apt install git git clone https://github.com/Err0r-ICA/WhatsPayloadRCE cd...
CVE-2026-39987-Poc
CVE-2026-39987-Poc Proof of Concept PoC WebSocket client for CVE-2026-39987 Marimo Pre-Auth RCE, intended for authorized security testing. ⚠️ Disclaimer This script/tool is provided for educational, research, and authorized testing purposes only. It is designed to be used on systems where you have...
CVE-2023-0315
CVE-2023-0315 The official exploit for Froxlor Remote Code Execution CVE-2023-0315...
POC-CVE-2025-55182
CVE-2025-55182 - React RSC RCE PoC for the deserialization vulnerability in the Flight protocol of React Server Components. What is it? Next.js 14+ and React 19 use a proprietary protocol "Flight" to communicate between client and server. The problem: the server loads any module without...
CVE-2022-31814
Download CVE-2022-31814 This script exploits a vulnerability in pfSense to upload a shell, execute a command, and then delete the shell. Requirements Python 3.x requests library Installation 1. Clone the repository or download the script. 2. Install the required Python libraries: pip install...
CVE-2026-64824-PoC
CVE-2026-64824 — Home Assistant Core Backup-Restore Symlink Path Traversal → RCE CVSS 8.4 Critical · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Authenticated admin attacker uploads a crafted backup tar. The restore path extracts the inner homeassistant.tar.gz with filter="fullytrusted" and only...
Blackash-CVE-2025-61757
🚨 CVE-2025-61757 — Pre-Auth RCE Alert 🚨 🧩 Summary ID: CVE-2025-61757 Product: Oracle Identity Manager Oracle Fusion Middleware Component: REST WebServices Affected Versions: 12.2.1.4.0 & 14.1.2.1.0 Severity: 🔴 Critical — 9.8 CVSS 3.1 Published: Oct 21, 2025 Type: Missing Authentication for Critic...
CVE-2026-103442
CVE-2026-103442: CentralAuth MergeAccount オブジェクトインジェクション 報告者: Marco Paciaroni BomboBombone。 CentralAuth は、移行状態をデコードする際にブラウザから提供されたマージセッションキーを受け入れていました。centralauth-merge 権限を持つユーザーは、PHP オブジェクトグラフを生成するキーに置き換えることができました。報告にある Guzzle の FileCookieJar...
Exploit-CVE-2023-38646-Metabase
Exploit CVE-2023-38646 Metabase before 0.46.6.1 open source and before 1.46.6.1 Enterprise Exploit for the Remote Code Execution RCE vulnerability identified in Metabase versions before 0.46.6.1 open source and 1.46.6.1 Enterprise. The vulnerability allows attackers to execute arbitrary commands ...
CVE-2014-0472
CVE-2014-0472 Use docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect upon successful...
CVE-2026-15409
🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE via WebSocket Proxy Proof‑of‑Concept exploit for CVE-2026-15409 – unauthenticated remote code execution on SonicWall SMA 1000 series appliances via the Erlang distribution protocol tunneled over WebSocket. 📖 Overview CVE-2026-15409 is a critical...