333889 matches found
TimeInjector
TimeInjector Time injector is a CVE-2018-14714 exploitation script in bash To tell if the target is vulnerable, the script works by first checking if the target is accessible and if it can establish a login session. After that, it checks for the existence of specific pages and performs a time-bas...
CVE-2023-34362
CVE-2023-34362: MOVEit Transfer Unauthenticated RCE For a full technical description of the vulnerability and exploitation, please read our AttackerKB Analysis. Usage ruby CVE-2023-34362.rb Note: The deserialization gadget is configured to spawn 'notepad.exe'. Example ruby poc-cve-2023-34362.rb...
CVE-2023-50965
๐ฅ CVE-2023-50965 โ Stack Buffer Overflow Exploit Linux Proof of Concept exploit for CVE-2023-50965 , demonstrating a stack-based buffer overflow leading to Remote Code Execution RCE on vulnerable systems without exploit mitigations enabled. This project was developed for security research and...
PS-2018-002---CVE-2018-14442
Foxit Reader - CPDFParser::mpCryptoHandler - Use After Free - RCE Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on...
CVE-2025-49113-Roundcube_1.6.10
CVE-2025-49113 โ Roundcube 1.6.10 Authenticated Remote Code Execution โ ๏ธ Disclaimer This repository is intended strictly for educational and research purposes. All demonstrations were performed in a controlled lab environment. Unauthorized testing or exploitation of systems without explicit...
CVE-2025-34040Exp
Seeyon OA has file upload leading to RCE CVE-2025-34040 Parameters options: -h, --help show this help message and exit -u URL, --url URL ่ฏท่พๅ ฅๅพ ๆฃๆต็URL -f FILE, --file FILE ่ฏท่พๅ ฅไธ่กไธไธชURL็ๆไปถๅฐๅ -n FILENAME, --filename FILENAME ่ฏท่พๅ ฅๆไปถๅ๏ผ้ป่ฎคไธบHello.jsp๏ผ๏ผ -c CONTENT, --content CONTENT ่ฏท่พๅ ฅไธไผ ็ๆไปถๅ ๅฎน๏ผ้ป่ฎคไธบHelloWord๏ผ๏ผ...
CVE-2020-10199
CVE-2020-10199 Previously, during a penetration test, I encountered a target environment that had Nexus Repository Manager deployed. After stepping on some pitfalls, I finally managed to get a shell. I'll make a brief record here so it's easier to review later if needed. Target version: Sonatype...
CVE-2017-8464-EXP
CVE-2017-8464-EXP Support x86 and x64 Just for test Lnk file from: https://github.com/rapid7/metasploit-framework/pull/8767 Thanks to ykoster Small change,replace the dll file,fix the bug of crashing explorer.exe.ykoster has fixed this bug POC: x86: x64: If you can determine the USB drive,one LNK...
exploit-CVE-2016-10033
PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...
CVE-2026-4631-cockpit-RCE
CVE-2026-4631 โ Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 โ 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...
PrintNightmare
Windows Print Spooler Service RCE CVE-2021-1675 PrintNightmare How to disable the Print Spooler service ? CMD Shell net start | findstr -i "spooler" net stop spooler REG ADD "HKLM\SYSTEM\CurrentControlSet\Services\Spooler" /v "Start " /t REGDWORD /d "4" /f PowerShell Get-Service -Name Spooler...
CVE-2022-29078
THM Challenge: SSTI RCE ๐ Description The ejs aka Embedded JavaScript templates package 3.1.6 for Node.js allows server-side template injection in settingsview optionsoutputFunctionName. This is parsed as an internal option, and overwrites the outputFunctionName option with an arbitrary OS comman...
CVE-2026-38526-POC
CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM โค 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...
CVE-2023-24100
CVE-2023-24100-Nuclei-Templates IoT RCE nuclei templates CVE-2023-24100 CNVD-2023-24100...
CVE-2026-6271
CVE-2026-6271 โ Career Section WordPress Plugin RCE Scanner Plugin: Career Section career-section CVE ID: CVE-2026-6271 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Vulnerability Type: Unauthenticated Arbitrary File Upload โ Remote Code Execution Affected...
CVE-2022-30507-PoC
Description remote code execution RCE by executing javascript code - Cross-site-scripting XSSand rendering process by nodeintegration which is responsible for rendering process and accessing node js code PoC Video Reference...
CVE-2025-48384-main
PoC for CVE-2025-48384 This is a POC. Don't download it in an unsafe environment. It will allow the hacker to execute remote code on your machine See CVE-2025-48384 To run: git clone --recurse-submodules [email protected]:zr0n/CVE-2025-48384-main.git The executed payload is here...
CVE-2026-40897
CVE-2026-40897 Remote Code Execution in Math.js Expression Parser โ CVE-2026-40897 Remote Code Execution in Math.js PoC โ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...
CVE-2020-17533
Recently, a remote code execution vulnerability was discovered in Apache Struts2 CVE ID: CVE-2020-17530. The Apache Struts2 framework is a web framework for developing Java EE web applications. It is widely used, thus the threat impact scope is large. 2. Vulnerability Description If developers...