Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Dopo Spring Cloud, il 29 marzo un'altra vulnerabilità pesante di Spring è esplosa su Internet: Spring Core RCE Il PoC in circolazione: Lo exploit è stato caricato comeexp.py La patch ufficiale di Spring è anche in produzione attiva Link alla patch nella produzione...

cve-2020-7247

cve-2020-7247 Título do Exploit: OpenSMTPD 6.6.2 - Execução Remota de Código. A nova Data: 2020-01-29. Autor do Exploit: 1F98D. Autor Original: Qualys Security Advisory. Página do Fornecedor: https://www.opensmtpd.org/. Link do Software: https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1...

CVE-2019-2618

PoC POST /beawlsdeploymentinternal/DeploymentService HTTP/1.1 Host: 127.0.0.1:7001 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux i686; rv:20.0 Gecko/20100101 Firefox/20.0 Accept: text/html, image/gif, image/jpeg, /; q=.2 Connection: keep-alive username: weblogic password: weblogic wlrequesttype:...

CVE-2024-57366

CVE-2024-57366 Exploit A robust exploit for CVE-2024-57366 that allows remote code execution on vulnerable routers through MAC address validation bypass and command injection. This is a post-authorization exploit that requires the router "Remote Control" feature to be on, and the administrative...

dubbo-rce

CVE-2023-23638 Solo a scopo di studio e ricerca ZooKeeper da fornire autonomamente L'ambiente di test è Java 8, le altre versioni non sono state testate, non è garantita l'usabilità Per la riproduzione è necessario aggiungere il parametro VM a DemoComsumer:...

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Remote Code Execution RCE Exploit Description This script exploits a Remote Code Execution RCE vulnerability in Pluck CMS v4.7.18. The vulnerability allows a malicious user to upload a malicious PHP file to the server and execute it, gaining remote command...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...

CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE im CGI Servlet – Apache Tomcat unter Windows Referenz : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat weist eine Schwachstelle im CGI Servlet auf, d...

CVE-2015-1578-PoC

CVE-2015-1578-PoC Panoramica Questo è un proof-of-concept exploit per CVE-2015-1578 , una vulnerabilità di buffer overflow in Achat 0.150 beta7 su Windows. Lo sfruttamento porta all'esecuzione di codice remoto tramite un pacchetto UDP modificato. Scopo Questo PoC ha lo scopo di servire come esemp...

CVE-2019-12840

CVE-2019-12840 Authenticated RCE in Webmin 1.910 - 'Package Updates' Verwendung : 1- Richten Sie einen netcat-Listener ein. 2- python3 exploit.py Hinweise: Geben Sie die URL an, z. B.: http://:port Bitte kopieren Sie das 'sid'-Cookie aus Ihrem Browser und geben Sie es an, damit der Exploit...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

CVE-2021-41773

Apache Path Traversal & RCE Exploit CVE-2021-41773 & CVE-2021-42013 These are critical path traversal vulnerabilities affecting Apache HTTP Server 2.4.49 and 2.4.50. They allow attackers to: Access files outside the web root LFI Achieve Remote Code Execution RCE if CGI is enabled Both...

CVE-2025-25257-Exploit-Tool

CVE-2025-25257 Exploit Tool Credits Based on watchTowr Labs, 0xbigshaq, and pwner.gg analyses. Warnings For educational purposes only. Use on authorized systems. Modifies database/filesystem. Enhanced Python tool for detecting and exploiting CVE-2025-25257 Pre-Auth SQLi to RCE in Fortinet FortiWe...

cve-2026-32475-elementor-pro-lab

CVE-2026-32475 — Elementor Pro Forms: Nicht authentifizierter beliebiger Datei-Upload → RCE Ein A/B-Docker-Lab, das CVE-2026-32475 reproduziert CVSS 9.x, Patchstack; Elementor Pro Forms-Datei-Upload-Feld, betroffen ≤ 4.2.1, behoben in 4.2.2 am 19.08.2026; gemeldet von Tin Pham / TF1T. Nicht...

CVE-2026-75865

CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 Proof-of-concept e analisi tecnica per CVE-2026-75865 , un upload arbitrario di file non autenticato che porta all'esecuzione remota di codice nel plugin WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Goog...

cve-2023-46604

Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 è una vulnerabilità ampiamente sfruttata che compare nella lista KEV della CISA. Questa implementazione go-exploit può eseguire una reverse shell sui target utilizzando un payload Nashorn, oppure scaricare un binario sul target ed eseguirlo...

CVE-2021-1675

CVE-2021-1675 - PrintNightmare DSC Mitigation PowerShell Kougyoku Gentou | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." The mitigation is to disable Print Spooler service. Well, most websites say to do this on...

Writing-Sample-1

Log4j: CVE-2021-44228 Summary of Log4j Vulnerability & Mitigations Table of Contents 1. Executive Summary 2. Identification of Vulnerable Endpoints and Services 3. Mitigations A. Block at the Border B. Install Endpoint Detection & Response EDR on Server Endpoints C. Place Vulnerable Enterprise Ap...

cve-2017-7269

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: http://" in a PROPFIND request, as exploited in the wild ...

Modified-CVE-2015-3306-Exploit

Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...