334378 matches found
React2Shell-CVE-2025-55182-Testing-Environment
React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...
CVE-2016-2098-my-first-exploit
CVE-2016-2098-my-first-exploit This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. It's written in python3, and remember to install the requests library. here is the command. pip3 install requests...
CVE-2021-40444
Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Update 31/05/2022 - CVE-2022-30190 - Follina Now the generator is able to generate the document required to exploit also the "Follina"...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE Authenticated Exploit for the Remote Code Execution vulnerability in Webmin versions prior to 1.997, through the Software Package Updates module. How does it work? The Webmin Software Package Updates module does not properly sanitize the u parameter before passin...
CNVD-C-2019-48814-CNNVD-201904-961
CNVD-C-2019-48814和CNNVD-201904-961 Thanks to t00ls-ximcx0101 for providing the script CNVD-C-2019-48814 POC Summary Related links: Qingshui Chuanqi's Jianshu article: https://www.jianshu.com/p/c4982a845f55 Reposted by Security Ancestor: https://dwz.cn/2GQvbUae Due to environment factors, paths ma...
CVE-2019-2729-Exploit
CVE-2019-2729-Exploit usage: oracle-weblogic-deserialize.py -h -u TARGET -c COMMAND -h, --help : Show help message and exit -u TARGET : Target URL -c COMMAND : Command to execute Example Usage python oracle-weblogic-deserialize.py -u http://192.168.1.1:8080 -c whoami Credit for YSS Payload...
CVE-2021-44228
CVE-2021-44228 Analysis How does it work? Below is a detailed process of a remote injection case by exploiting log4shell vulnerability. First, there are 3 part we need to know: 1. Log4j2 allows for the logging of data using a feature called message lookup substitution , where log messages can...
CVE-2026-23744-POC
Description This vulnerability exists because MCPJam Inspector exposes internal API endpoints intended for debugging and development. These endpoints accept user-controlled input and pass it directly to system-level process execution without proper validation or sanitization. By sending a crafted...
Wazuh-RCE
Intro Wazuh RCE 8.4...
CVE-2026-34197-Apache-ActiveMQ-RCE
Fixed the issue where the reverse shell failed because the command was not XML-escaped...
CVE-2025-61765_PoC
Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...
CVE-2019-16759-Vbulletin-rce-exploit
This repository does not have a README...
CVE-2021-21220
Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...
DNSRPC-BOF
DNSRPC-BOF Beacon Object File BOF implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by exploiting the ServerLevelPluginDll edge1 2 3 by using MS-DNSP. 4 Exploitation requires access to a user account that is a member of the DnsAdmins group...
CVE-2021-41773
Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Fixed Version Description This is an exploit for the Apache HTTP Server 2.4.49 vulnerability identified as CVE-2021-41773. The original version of the exploit published on Exploit-DB contained syntax and execution...
RLSA-2026:82295 Important: hplip security update
The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fixes: hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of...
hplip security update
An update is available for hplip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Proje...
cve-2026-26114-poc
CVE-2026-26114 Use only in labs or authorized testing systems. Python PoC pip install requests requests-ntlm python poc/cve202626114rce.py ^ --target http://sharepoint.local ^ --username spuser1 ^ --password "Password123!" ^ --domain SP19 ^ --cmd "cmd /c whoami C:\Windows\Temp\cve202626114.txt" Y...
Node_CVE-2023-29017
CVE-2023-29017 | Remote Code Execution via vm2 Sandbox Escape WHS 4th Generation, Class 31 - Kim Geon-woo @gunwoo105 Vulnerability Summary vm2 is a Node.js sandbox library for executing untrusted JavaScript in a restricted environment. Under normal circumstances, code inside the sandbox should no...