333930 matches found
CVE-2019-25137-RCE
CVE-2019-25137-RCE CVE-2019-25137 is an Umbraco RCE vulnerability, the script within this repo is slightly altered This exploit script is based on script by Alexandre ZANNI EDB-ID 49488. It is slightly altered, changed the flow to skip token extraction before login, performed the login first...
CVE-2025-55182-Exploiter
π‘οΈ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit π₯ Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities β especially CVE-2025-55182 RSC Deserialization RCE. β ...
CVE-2024-9290
CVE-2024-9290 Super Backup & Clone - Migrate for WordPress = 2.3.3 - Unauthenticated Arbitrary File Upload Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check o...
CVE-2017-7269
CVE-2017-7269 Vulnerability ID: CVE-2017-7269 Discoverers: Zhiniang Peng and Chen Wu Information Security Laboratory, School of Computer Science and Engineering, South China University of Technology Description: IIS 6.0 does not enable WebDAV by default. Once WebDAV support is enabled, servers...
CVE-2021-22911
CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1 The getPasswordPolicy method is vulnerable to NoSQL injection attacks and does not require authentication/authorization. It can be used to take over accounts by leaking password reset tokens. Taki...
CVE-2020-29607-POC
Pluck CMS 4.7.13 File Upload RCE Exploit π¨ Educational Remote Code Execution Exploit π¨ Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 β οΈ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...
CVE-2022-26134
CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...
CVE-2026-60004
CVE-2026-60004 β Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection β post-index-change β Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...
CVE-2026-114422
The Enable Media Replace WordPress plugin (versions before 4.2.3 , specifically 4.1.4-4.2.2 ) is vulnerable to unauthenticated PHP Object Injection . The root cause is a failure to restrict allowed classes during the deserialization of stored metadata within the media replace-and-update-links rou...
CVE-2026-114422 Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metadata during its media replace-and-update-links routine, allowing unauthenticated users to inject a PHP object that is instantiated when a user with upload access performs a...
CVE-2026-114422 Enable Media Replace 4.1.4 - 4.2.2 - Unauthenticated PHP Object Injection via Metadata Replacer
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metadata during its media replace-and-update-links routine, allowing unauthenticated users to inject a PHP object that is instantiated when a user with upload access performs a...
EUVD-2026-113743
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metadata during its media replace-and-update-links routine, allowing unauthenticated users to inject a PHP object that is instantiated when a user with upload access performs a...
cve-2022-22963
Spring Cloud Function SpEL - cve-2022-22963 Build $ git clone https://github.com/twseptian/cve-2022-22963.git $ cd cve-2022-22963 $ docker build . -t spring-spel-0day $ docker run -p 8080:8080 --name spring-spel-0day spring-spel-0day Payload...
cve-2024-6387-poc
cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...
Moniker-Link-CVE-2024-21413
π‘οΈ Moniker Link CVE-2024-21413 Room: Moniker Link CVE-2024-21413 β TryHackMe Status: β Completed Date: 30 May 2025 π― Objective Understand and exploit CVE-2024-21413, a vulnerability in Microsoft Outlook that bypasses Protected View using Moniker Links to leak NTLM credentials. Learn how to perform...
text4shell-exploit
Text4shell-exploit This is a Proof of Concept exploiting the vulnerability in Apache Commons Text CVE-2022-42889 Vulnerable versions : 1.5.0 to not including 1.10.0 Impact Successful exploitation of this vulnerability allows an unauthenticated attacker to execute arbitrary code on the vulnerable...
CVE-2024-28397-js2py-Sandbox-Escape
CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...
CVE-2022-26809-RCE
CVE-2022-26809-RCE This repository contains a PoC for remote code execution CVE-2022-26809 This is a test does not work...
rocketcat-cve-2021-22911-exploit
Rocket.Chat CVE-2021-22911 Exploit β οΈ DISCLAIMER - EDUCATIONAL USE ONLY This exploit is for authorized penetration testing and educational purposes only. Unauthorized access to computer systems is illegal. The author is not responsible for any misuse. π Overview CVE-2021-22911 is a critical...
CVE-2025-49113-PoC
CVE-2025-49113 Roundcube RCE PoC π How to launch the project 1. Starting the vulnerable server cd Stand docker-compose up -d 2. Running the script against the target cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test --command "id" π Key Requirements...