327326 matches found
CVE-2022-1388
Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...
CVE-2022-0944
CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username optional password log...
CVE-2022-22954
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...
PoC-2023-43208
CVE-2023-43208-EXPLOIT Mirth Connect Remote Code Execution RCE Exploit ⚠️ FOR EDUCATIONAL AND LAB USE ONLY ⚠️ A proof-of-concept exploit for CVE-2023-43208, a remote code execution vulnerability in Mirth Connect before version 4.4.1. 🚨 IMPORTANT LEGAL DISCLAIMER This tool is strictly for: 🧪...
CVE-2025-55182-poc
CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. Quick Start Install dependencies npm install Start vulnerable server port 3002 npm start Run RCE exploit npm run exploit Expected Output...
CVE-2024-46986
CVE-2024-46986 Camaleon CMS Exploit - Arbitrary File Upload This repository contains a Python script that automates the exploitation of a file upload vulnerability in Camaleon CMS. The vulnerability allows an attacker to upload arbitrary files such as Ruby scripts to the server, potentially leadi...
CVE-2025-55182
CVE-2025-55182 Exploit A simple python script that exploits the vulerability in React Server Components in CVE-2025-55182 by injecting a shell in the application. The script is tested on Next.js version 16.0.6 Usage Clone the repository git clone https://github.com/ahmedshamsddin/CVE-2025-55182 R...
CVE-2026-46275
CVE-2026-46725 — TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass → Remote Code Execution 📋 Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer 🔍 About the...
CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-
CVE-2026-34156 – NocoBase Sandbox Escape RCE -orange Authenticated Remote Code Execution in NocoBase versions ≤ 2.0.26 via workflow sandbox escape. 📋 Description CVE-2026-34156 is a sandbox escape vulnerability in the NocoBase workflow engine. An authenticated attacker can create a malicious...
PoC-CVE-2017-0199
PoC-CVE-2017-0199 Exploit toolkit for vulnerability RCE Microsoft RTF. About this vulnerability: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...
CVE-2020-35729
Information Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...
log4j2-issue-check
Evaluate the Log4Shell: RCE 0-day Issue This repo contains the code to evaluate Log4j2 issue CVE-2021-44228 More details https://www.lunasec.io/docs/blog/log4j-zero-day/ How to Test Send GET request with query parameter as $jndi:ldap://127.0.0.1:3089/...
CVE-2021-24155.rb
WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...
php_filter_chain_generator
PHP filter chain generator A CLI to generate PHP filters chain, get your RCE without uploading a file if you control entirely the parameter passed to a require or an include in PHP! Usage Help $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN --rawbase...
CVE-2021-40444
Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Background Although many PoC are already around the internet, I guessed to give myself a run to weaponizing this vulnerability, as what I...
CVE-2026-2441-PoC
CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...
Exploit for CVE-2026-109618
php2shell — CVE-2026-109618 / CVE-2026-109619 · ORBITRON respo...
CVE-2024-55187
Summary Sensitive administrative parameters are not sufficiently sanitized, allowing an attacker to poison paths to system binaries. The attacker can then upload dangerous CSV files that can then be treated as PHAR archives holding shell metacharacters that will be evaluated by PHP's exec call,...
CVE-2024-21683-RCE
CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...