ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

Text4shell--Automated-exploit---CVE-2022-42889

Install maven - maven-linux //For automated hacking: 1../install.sh 2../exploit.sh 3.To remove the application use ./stopapp.sh //For manual hacking: 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080...

CVE-2022-1388

CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage To Check against single host URL python3 exploit.py -v true -u targeturl To Attack host and test command on this host python3 exploit.py -a true -u targeturl -c command Attack list of hosts or attaching file of host URL's IP...

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 2018 RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2018. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If...

MOVEit-Exploit

MOVEit Exploit an exploit of POC for CVE-2023-34362 affecting MOVEit Transfer Note this project is done... Our instagram page . Our youtube chanel . Our twitter page CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Disclaimer This software has been created purely for the purposes o...

pax

pax Exploit padding oracles for fun and profit! Pax PAdding oracle eXploiter is a tool for exploiting padding oracles in order to: 1. Obtain plaintext for a given piece of CBC encrypted data. 2. Obtain encrypted bytes for a given piece of plaintext, using the unknown encryption algorithm used by...

CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...

react-cve-2025-55182

fix-react2shell A CLI tool to detect and fix the critical CVE-2025-55182 React2Shell vulnerability in React Server Components and Next.js applications. The Vulnerability CVE-2025-55182 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability affecting: React Server DOM packages...

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

PHP_CVE-2012-1823

PHP-CGI Remote Code Execution Vulnerability CVE-2012-1823 Principle Reference article http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Affected versions: php Vulnerability Analysis PHP SAPI and Operation Modes First, let's introduce the operation modes of PHP. Download the PHP source...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker python CVE-2024-27198-RCE.py -t http://192.168.198.173:8111 --behinder4...

CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write

CVE-2025-5688 – FreeRTOS-Plus-TCP Out-of-Bounds Write Exploit Remote memory corruption / DoS / potential RCE trigger in FreeRTOS-Plus-TCP when processing overly long DNS names in LLMNR or mDNS queries Buffer Allocation Scheme 1. Exploit Author: Mohammed Idrees Banyamer Country: Jordan Instagram:...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage go run main.go -t -c Examples go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t http://127.0.0.1 -c "cat /etc/passwd"...

Spring-Web-5xx-Mitigated-version

Spring-Web-5xx-Mitigated-version Overview This mitigated version of Spring Web 5.x.x is specifically crafted to address critical vulnerabilities detected by multiple vendors using Sonatype and Mend. The vulnerabilities, identified under the CVE-2016-1000027 advisory, pose a risk of remote code...

RP_Import_RCE

Real Player 'external::Import' Arbitrary file download, Directory Traversal Vulnerabilities leads to Remote Code Execution video demo: https://youtu.be/CONlijEgDLc Real Player uses Microsoft Internet Explorer functionality and exposes properties and methods through a special mean which is...

CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...

CVE-2026-Termius

Termius macOS Application Vulnerability Report CVE-2026-Termius Target : Termius macOS Version Tested : Latest as of Jan 2026 Impact : Remote Code Execution RCE, Local Privilege Escalation LPE, App Security Bypass 🚨 Executive Summary Three critical vulnerabilities were identified in the Termius...

Mitigate-CVE-2023-46747

Ansible Playbook to Mitigate CVE-2023-46747 K000137353: BIG-IP Configuration utility unauthenticated remote code execution vulnerability CVE-2023-46747 Here is the link https://my.f5.com/manage/s/article/K000137353 How to use it 1. Git clone my repo...

CVE-2020-7699_reproduce

CVE-2020-7699 Reproduction Reproduction for Node.js RCE vulnerabilityCVE-2020-7699, my lab work Setup Node.js edition: v14.16.1, please make sure that the edition of Node.js is 14Other edition will propably work, I didn't test Python edition：3.9.5, Python is only used to send HTTP attack request,...