CVE-2026-58138

CVE-2026-58138 — Conductor 3.21.21..3.30.2 Unauthenticated Remote Code Execution Critical Remote Code Execution Vulnerability in Orkes Conductor 📋 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE vulnerability affecting Orkes Conductor versions 3.21.21 through 3.30....

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...

Rust_CVE-2025-55182

CVE-2025-55182 Exploit Tool Rust Version Project Overview This project is a security research tool developed in Rust, targeting the Remote Code Execution RCE vulnerability present in [email protected]. The vulnerability allows an attacker to execute arbitrary code on a target server without...

CVE-2024-25600

MODIFIED CVE-2024-25600 original - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE Exploit A Python exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution vulnerability. Description This tool exploits a critical vulnerability in WordPress...

CVE-2026-38526-KrayinCRM-RCE

CVE-2026-38526 - Krayin CRM RCE xpl0ited by infrar3d This is a Remote Code Execution RCE proof-of-concept specifically designed for Krayin CRM v2.2.x, an open-source customer relationship management system. The script automates the exploitation of a file upload vulnerability in the CRM's...

CVE-2024-8425

Wordpress WooCommerce Ultimate Gift Card = 2.6.0 - Unauthenticated Arbitrary File Upload CVE-2024-8425 The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and...

ez-iRZ

ez-iRZ Exploit for CVE-2022-27226 Cross Site Request Forgery to Remote Code Execution in iRZ Mobile Routers Credits John Jackson Chris Mack --- https://github.com/0xHalcyon Stephen Chavez --- https://github.com/redragonx/ Robert Willis Description A CSRF issue on iRZ Mobile Routers through...

L4sh

Log4Shell RCE Exploit fully independent exploit does not require any 3rd party binaries. The exploit spraying the payload to all possible logged HTTP Headers such as X-Forwarding , Server-IP , User-Agent Usage python main.py -i lhost -u http://target:targetport -c "commandtoexecute" -p lhttpport ...

SpringFramework_CVE-2022-22965_RCE

SpringFrameworkCVE-2022-22965RCE SpringFramework Remote Code Execution Vulnerability CVE-2022-22965 Vulnerability Reproduction Environment docker pull vulfocus/spring-core-rce-2022-03-29 docker run -d -p 8090:8080 --name springrce -it vulfocus/spring-core-rce-2022-03-29 Write webshell Note: The...

Spring-Web-5xx-Mitigated-version

Spring-Web-5xx-Mitigated-version Overview This mitigated version of Spring Web 5.x.x is specifically crafted to address critical vulnerabilities detected by multiple vendors using Sonatype and Mend. The vulnerabilities, identified under the CVE-2016-1000027 advisory, pose a risk of remote code...

CVE-2025-50754-PoC

CVE-2025-50754 Stored XSS to Remote Code Execution in a PHP-Based CMS Platform Summary A PHP-based CMS platform version 5 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" feature. When an administrator views a user-submitted report, malicious JavaScript is executed within...

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: Brief Description Apache Log4j2 2.0-beta9 through 2.15.0 no releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control...

CVE-2024-22274-RCE

Privilege Escalation: VMware vCenter Server Authenticated RCE 📜 Description The “com.vmware.appliance.recovery.backup.job.create” and the “com.vmware.appliance.recovery.backup.validate” API components are vulnerable to a flag injection attack that can be leveraged to execute arbitrary commands as...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution TL;DR. A malformed DUMP payload passed to RESTORE triggers a heap double-free in Redis's legacy hash-zipmap loader. Under default jemalloc the double-free is silent the server keeps running, which turns it into a controllab...

CVE-2024-4577

Just for researching Poc For Default XAMPP curl -v -d "" http://127.0.0.1/php-cgi/php-cgi.exe/?%add+allowurlinclude%3Don+-d+autoprependfile%3Dphp%3A//input+-d+cgi.forceredirect%3D0...

cve-2021-20837-poc

cve-2021-20837-poc PoC for the CVE-2021-20837 : RCE in MovableType This vulnerability was discovered with the collaboration of The.Criminal.One. This PoC was developped by him. BLOG POST: https://nemesis.sh/posts/movable-type-0day/...

BotCon

BotCon Attlasian Confluence Un-Authenticated Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution...

CVE-2024-26304-RCE-exploit

CVE-2024-26304 - Remote Code Execution Vulnerability in ArubaOS Overview CVE-2024-26304 is a critical remote code execution RCE vulnerability affecting ArubaOS due to a buffer overflow in its L2/L3 Management service. An attacker can exploit this by sending specially crafted packets to the PAPI...

Cups-RCE-Exploit

CUPS RCE Exploit - CVE-2024-47176 Chain What It Is A fully functional proof-of-concept exploit targeting the CUPS Common Unix Printing System remote code execution vulnerability chain discovered in September 2024. This chain consists of four CVEs — CVE-2024-47176, CVE-2024-47076, CVE-2024-47175,...

CVE-2020-17530

S2-061 The scripts are written based on the struts2-059/061 vulnerability test environment from vulhub, and are not universally applicable. Feedback from experienced individuals is welcome. struts2-061-poc.py can execute simple system commands Usage: python struts2-061-poc.py http://ip:port comma...