CVE-2019-15642

CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root ⚡ root@jas50...

CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - Image Remote Code Execution Exploit of CVE-2019-8942 and CVE-2019-8943 using python : ExploitDB : https://www.exploit-db.com/exploits/49512 The original exploit for metasploit : WordPress Core 5.0.0 - Crop-image Shell Upload Metasploit :...

CVE-2025-55182-bypass

CVE-2025-55182 Header Bypass Next-Action header bypass for CVE-2025-55182. Achieves React RSC RCE without distinctive headers, bypassing WAF rules. Key Finding The Next-Action header is NOT required for exploitation. Attack Vector| Next-Action Header| WAF Detection ---|---|--- Original CVE|...

CVE-2021-42013

CVE-2021-42013 Contributor 석은호@eunho87 CVE-2021-42013 Apache HTTP Server Path Traversal Vulnerability Summary A bug in the path normalization handling of Apache HTTP Server 2.4.50 allows arbitrary file reading or remote code execution without authentication. This occurs due to an incomplete patch...

CVE-2024-12381

CVE-2024-12381 CVE-2024-12381 is a WebAssembly type canonicalization vulnerability in Chrome's V8 engine where CanonicalEquality::EqualValueType fails to account for nullability in indexed reference types. Combined with a JSPI-based V8 sandbox bypass CVE-2024-12692, this allows remote code...

OpenPLC-CVE-2021-31630-RCE

OpenPLC v3 Authenticated RCE CVE-2021-31630 This is a modern Python 3.13+ compatible proof-of-concept exploit for CVE-2021-31630, a vulnerability in OpenPLC v3 that allows an authenticated user to upload a custom hardware layer containing malicious code, leading to remote code execution RCE on th...

CVE-2021-25646

Apache Druid RCE title="druid" && title=="Apache Druid" POST /druid/indexer/v1/sampler?for=filter HTTP/1.1 Host: x.x.x.x:8888 Content-Length: 612 Accept: application/json, text/plain, / Origin: http://x.x.x.x:8888 User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko...

CVE-2021-22941

Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

CVE-2024-32002-git-rce

CVE-2024-32002-git-rce...

ruby-RCE-CVE-2019-5420-

Ruby Deserialization CVE-2019-5420 https://github.com/PenTestical/CVE-2019-5420 References: 1 Ruby on Rails command execution vulnerability payload implementation process https://hackerone.com/reports/473888 Since ActiveSupport::MessageVerifier and ActiveSupport::MessageEncryptor use Marshal as t...

CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE — Modified Version Based on the project from https://github.com/chvancooten/follina.py, modifications have been made to allow custom specification of the docx template file, making it easier for phishing use in real-world scenarios. After editing your...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack These are just some scripts which you can use to detect and exploit the Apache Struts Vulnerability CVE-2017-5638 There is a MassScanner and Exploiter, You can use scanner to Mass Scan a list of URLs and then exploit them by Exploiter. The Exploiter will run arbitrary...

CVE-2026-3854-lab

Flagship Lab 001: From Git Push Options to RCE A local Learning Lab and Research Lab inspired by the publicly documented vulnerability concepts behind CVE-2026-3854. Both experiences use real authenticated Git pushes against ForgeDock, a fictional Git server; the Research Lab. !CAUTION This proje...

CVE-2024-23692

Rejetto HFS HTTP File Server CVE-2024-23692 Vulnerability Overview Rejetto HFS HTTP File Server is a simple web file server that facilitates file sharing over a network or the internet. Despite its ease of use and simplicity, a critical vulnerability CVE-2024-23692 has been discovered, making the...

CVE-2025-23942-poc

WP Load Gallery Exploit CVE-2025-23942 📌 Description Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. ⚠️ Vulnerability Details CVE ID: CVE-2025-23942...

CVE-2024-28397-Js2Py-RCE-Exploit

💡 Deep Dive: Click here to read the full technical briefing PDF. CVE-2024-28397: Js2Py Sandbox Escape Payload Generator A professional payload generator for CVE-2024-28397. This tool generates malicious JavaScript code designed to escape the js2py sandbox versions = 0.74 and execute arbitrary...

CVE-2021-29440

CVE-2021-29440 Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10 Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this...

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-frameworkclass MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the...

CVE-2026-Discord

Critical Vulnerability Report: Discord macOS Client Date : 2026-01-25 Target : Discord Client macOS Stable 0.0.373 Author : Antigravity 🚨 Executive Summary We have identified a critical security vulnerability in the Discord macOS Client Electron-based involving the forced exposure of the Remote...