334297 matches found
OurSharePoint-CVE-2025-53770
OurSharePoint — CVE-2025-53770 PoC Self-contained, single-binary SharePoint RCE tool. Generates a TypeConfuseDelegate gadget chain as raw MS-NRBF bytes no ysoserial.exe, wraps it in a DataSet deserialization payload, and delivers it over HTTP using the authentication bypass — all in one shot...
CVE-2025-24813-PoC
CVE-2025-24813-PoC CVE-2025-24813 affects Apache Tomcat - if it's a vulnerable version and spectacularly misconfigured, an attacker can get RCE with one GET and one POST. More info here This is Yiheng An, Jun Li, Qiang Liu, Haozhe Zhang, Qi Deng's script from the recent writeup modified to accept...
cve-2025-55182-react2shell_reproduction
CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth Remote Code Execution in React Server Components Discovered by Chinese threat actors. Actively exploited by China-nexus APT groups. Overview Dubbed "React2Shell" , this vulnerability enables unauthenticated remote code execution via unsaf...
CVE-2026-3844-Lab
CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...
CVE-2021-22204
CVE-2021-22204 - Exiftool Remote Code Execution Description Recently, the researcher wcbowling found a vulnerability in the Exiftool tool, that enabled a malicious actor to perform a Remote code Execution attack. This vulnerability was found in the Gitlab bug bounty program, where they use this...
CVE-2022-30190-Follina-Lab
🔴 CVE-2022-30190 — Follina MSDT RCE Lab Researcher: Abhimanyu Rawat Role: Technical Research & Cyber Security Operations Intern Date: May 8, 2026 📌 What is Follina? CVE-2022-30190 nicknamed "Follina" is a zero-day Remote Code Execution RCE vulnerability in Microsoft Windows that allows an attacke...
CVE-2015-1635-POC
CVE-2015-1635-POC MS15-034 HTTP.sys 远程执行代码检测脚本（MS15-034 HTTP.sys remote execution code poc script） 代码第7行处放置检测的IP，然后运行： python CVE-2015-1635-POC.py Place the detected IP on the seventh line of code and run: python CVE-2015-1635-POC.py...
react2shell-interactive
React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...
Rasa-cve-exp
Rasa-cve-exp CVE-2021-42556 server-1.py Just run it directly python server-1.py Arbitrary File Upload PUT /model "modelserver":"url":"http://192.168.244.128:5000/stage1","waittimebetweenpulls":0 Effect as follows: CVE-2021-41127 server-1.py Default model name: evilimportmodel.tar.gz Malicious mod...
CVE-2021-44228
CVE-2021-44228 log4shell POC log4j Scanning tool This tool will help you identify remote code execution vulnerability log4j on your systems. Requirements You will need to install httpx, subfinder, assetfinder, curl and amass in order to run the bash script. Installation 1. Simply git clone the re...
CVE-2024-28741-northstar-agent-rce-poc
NorthStar C2 agent RCE via stored XSS Agent RCE PoC for CVE-2024-28741, a stored XSS vulnerability in NorthStar C2. This exploit works by sending multiple malicious agent registration requests to the teamserver to incrementally build a functioning javascript payload in the logs web page. This XSS...
CVE-2018-6574-go-get-RCE
CVE-2018-6574-go-get-RCE The issue is due to the fact that when installing a package, Golang will build native extensions. This can be used to pass additional flags to the compiler to gain code execution. For example, CFLAGS can be used. You can build it using the following command: $ gcc -shared...
CVE-2026-23744-Remote-Code-Execution-POC
CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Run the exploit python3 exploit.py...
CVE-2025-33053-POC
CVE-2025-33053 - WebDAV Remote Code Execution RCE PoC & C2 Simulation ⚠️ Educational Purposes Only This project demonstrates a proof-of-concept exploiting WebDAV and .url file delivery to achieve realistic remote code execution. It includes a decoy-based executable and a controlled simulation of...
docker-CVE-2019-11043
Docker image and commands to check CVE-2019-11043 CVE: CVE-2019-11043 Description: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FC...
laravel-8.4.2-rce
laravel-8.4.2-rce Setup enviroment git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve Usage python3 exploit.py http://pwnme.me:8000 /var/www/html/laravel/storage/logs/laravel.log 'uname -a'...
CVE-2021-39172-RCE
CVE-2021-39172 Cachet 2.4: Code Execution via Laravel Configuration Injection blog post about the vulnerability https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ you can use this for ctf or just for learning have fun and May God bless you all...
CVE-2024-23692_Exploit
CVE-2024-23692 / Exploit Code A vulnerability has been discovered in HFS 2.3 and earlier versions that allows sending CMD commands to the server to execute them. Detail: https://asec.ahnlab.com/ko/74113/ This code is for educational purposes only, and legal responsibility for misuse lies with the...
pwnacle-fusion
pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...