320495 matches found
CVE-2026-4631-cockpit-RCE
CVE-2026-4631 β Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 β 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...
CVE-2025-34085
CVE-2025-34085 β WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....
CVE-2024-8353-PoC
Proof-Of-Concept Code for CVE-2024-8353 This repository contains a script for exploiting the CVE-2024-8353 vulnerability in the GiveWP plugin for WordPress. This vulnerability allows unauthenticated PHP Object Injection, potentially leading to remote code execution. Overview The provided scripts...
CVE-2026-61343-poc-librebooking-rce
CVE-2026-61343-poc-librebooking-rce Librebooking Admin RCE PoC CVE-2026-61343...
CVE-2023-2877
CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Usage usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message and exit -w URL,...
gitlab-cve-2020-10977
GitLab CVE2020-10977 Introduction This script provides remote code execution against GitLab Community Edition CE and Enterprise Edition EE. The CVE is an arbitrary file read which allows you to extract the Rails secretkeybase by downloading the GitLab secrets.yaml file. Which in turn, enables you...
CVE-2021-41773
CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...
CVE-2017-10271
Brief Description Command execution with echo output Direct shell upload Tested OK on Linux with WebLogic 10.3.6.0 Usage python weblogicwlswsatexp.py -t 172.16.80.131:7001 usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this help message and...
CVE-2024-21413-Vulnerabilidad-Outlook-LAB
CVE-2024-21413 β Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...
CVE-2026-7275-moodle
CVE-2026-7275-moodle PoC & documentation for CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs β Path Traversal / Arbitrary File Write that can lead to RCE on unpatched Moodle versions. Disclaimer: For authorized security research, auditing, and defensive education only. Do not...
CVE-2025-10585-The-Chrome-V8-Zero-Day
CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today βοΈπ‘οΈ Google has released an out-of-band patch this week for CVE-2025-10585 , a serious type-confusion vulnerability in Chromeβs V8 JavaScript / WebAssembly engine. The bug is not theoretical β Googleβs Threat Analysis Group confirmed...
CVE-2024-23346-exploit
CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...
CVE-2021-22205
CVE-2021-22205 Fork of mr-r3bot/Gitlab-CVE-2021-22205 Introduction CVE-2021-22205: GitLab Unauthenticated Remote Code Execution Vulnerability Exploit Removed the dependency on djvumake & djvulibre, directly generates payload internally, can be executed on Windows platform. Usage ιθ¦ζζ python3...
PoC-for-CVE-2021-38540-
CVE-2021-38540 Proof of Concept Missing Authentication on Critical component Known as CVE-2021-38540 About this bug: The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, variables List Variables PoC Source: POST /variable/varimport HTTP/2 Host:...
wordpress-cve-2026-63030
WordPress REST API Batch Route Confusion + SQL Injection β RCE Pre-authentication, unauthenticated, no plugins required. Works against a stock WordPress install via the REST API batch endpoint. | ---|--- CVE| CVE-2026-63030 route confusion β RCE + CVE-2026-60137 SQLi GHSA| GHSA-ff9f-jf42-662q Β·...
CVE-2021-41773
CVE-2021-41773 π Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...
CVE-2018-10562
CVE-2018-10562 CVE-2018-10562 exploit About RCE on GPON home routers CVE-2018-10561:Authentication Bypass CVE-2018-10562: Command Injection Dependencies required requests urllib2 ssl re Screenshots...
F5-BIG-IP-RCE-CVE-2022-1388
CVE-2022-1388 F5 BIG-IP RCE Multi-threaded Detection Usage: εδΈͺurl: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx ζΉιε€ηΊΏη¨: python3 CVE-2022-1388.py -f url.txt ζ§θ‘ε½δ»€: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx -c whoami Result:...
CVE-2024-5452
CVE-2024-5452 01. Overview of RCE and pytorch-lightning 1 Overview of RCE and pytorch-lightning RCE Remote Code Execution is a vulnerability that allows an attacker to execute arbitrary code remotely within a system or application, and is classified as CWE-94: Improper Control of Generation of...
cve-2025-63888-exploit
CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. β οΈ Disclaimer This tool is for authorized security testing and...