Exploit-CVE-2025-24801

CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...

boopkit

================================================================ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗██╗████████╗ ██╔══██╗██╔═══██╗██╔═══██╗██╔══██╗██║ ██╔╝██║╚══██╔══╝ ██████╔╝██║ ██║██║ ██║██████╔╝█████╔╝ ██║ ██║ ██╔══██╗██║ ██║██║ ██║██╔═══╝ ██╔═██╗ ██║ ██║ ██████╔╝╚██████╔╝╚██████╔╝██║ ██║...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL required. If just URL given, it will RCE, else it...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...

cve-2010-4221-lab

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch to RCE A fully reproducible lab and a hand-written, raw-socket exploit for CVE-2010-4221 — the pre-authentication stack buffer overflow in ProFTPD's prnetiotelnetgets — built as a learning exercise in vulnerability research and exploit...

CVE-2021-3129

CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Modified from @crisprss's https://github.com/crisprss/LaravelCVE-2021-3129EXP , added more available gadgets for traversal Use： python3 exp.py http://127.0.0.1:8888 Preview：...

CVE-2022-28672

CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE ⚠️ EDUCATIONAL PURPOSES ONLY — Use on real systems is prohibited. 📋 Project Overview / Project Overview Prepared as part of the BGT-Pentest-LAB cybersecurity final project. Xiaomi HyperOS System Updater...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

-CVE-2024-45352

🚨 CVE-2024-45352 – Xiaomi Smarthome Remote Code Execution RCE 📌 Summary A critical vulnerability CVE-2024-45352 was discovered in the Xiaomi Smarthome application, allowing unauthenticated remote code execution RCE via improper input handling in the internal API parser. This vulnerability can be...

CVE-2023-49070

CVE-2023-49070 Pre-auth RCE in Apache Ofbiz!! Usagse Install Open JDK 11 First! sudo apt install openjdk-11-jdk Check POC Video: https://youtu.be/gDzYb6YvBSQ...

CVE-2019-19609

CVE-2019-19609 Strapi Remote Code Execution Usage python3 exploit.py rhost jwt url lhost Exploit POC https://bittherapy.net/post/strapi-framework-remote-code-execution/...

Awesome-CVE-2021-44228

Awesome-CVE-2021-44228 An awesome curated list of repos for CVE-2021-44228. PoC tangxiaofeng7 https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce christophetd https://github.com/christophetd/log4shell-vulnerable-app jas502n https://github.com/jas502n/Log4j2-CVE-2021-44228 HyCraftHD...

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: Arbitrary File Read Vulnerability Leading to RCE Jenkins uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces an @ character followed by a file...

CVE-2022-35411

rpc.py 0.6.0 - Remote Code Execution RCE Exploit fixed by: Liquidsky...

CVE-2022-25813

CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz By inserting malicious content in a message’s “Subject” field, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote...

opmonster

OpMonster CVE-2020-8636 — authenticated remote code execution exploit for Opmon About • Install • Usage • License About OpMonster is a proof-of-concept exploit for CVE-2020-8636 , a remote code execution vulnerability in the Opmon monitoring platform. It abuses the nettools.php endpoint, which le...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow in Tenda HG7 / HG9 / HG10 Routers 📖 Overview CVE-2026-11499 is a reported stack-based buffer overflow vulnerability affecting several Tenda router models , including: HG7 HG9 HG10 Successful exploitation may allow an attacker to trigger a crash, denial...

CVE-2020-8816

Notes to defend against this exploit Patching Just do it... now. Subscribe to/watch the Pi-hole repository for new releases and Issues and Pull requests if you're serious. Network Do not expose Pi-hole to the internet. Only expose Pi-hole DNS port 53 to DNS clients, not other ports like managemen...