WSUS-CVE-2025-59287-RCE

WSUS-CVE-2025-59287-RCE CVE-2025-59287 is a critical CVSS 9.8 remote code execution vulnerability affecting ALL Microsoft Windows Server Update Services aka WSUS, and has been exploited in the wild. The vulnerability exploits insecure deserialization in the GetCookie endpoint, allowing...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit Module Overview This is a Metasploit module for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This module is designed to serve as a clean, minimal, and...

CVE-2026-40048

camel-pqc FileBasedKeyLifecycleManager Unsafe Deserialization Reproducer CVE-2026-40048 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-pqc component, tracked as CVE-2026-40048. FileBasedKeyLifecycleManager reads .key files from the configured key directory...

CVE-2023-41892_PoC

CVE-2023-41892 Craft CMS PoC This repository contains proof-of-concept scripts and a local Vulhub lab for reproducing CVE-2023-41892, a pre-authenticated remote code execution vulnerability in Craft CMS. Use this project only in an authorized local lab or other systems where you have explicit...

sharepoint-toolshell-cve-2025-53770

SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overview CVE-2025-53770 is a critical remote code execution RCE vulnerability affecting Microsoft SharePoint Server 2016, 2019, and Subscription Edition on-premises only, not SharePoint Online. Attackers can bypass authentication and achieve full...

CVE-2023-35813-PoC

Sitecore Remote Code Execution Vulnerability CVE: 2023-35813 discovered by @mwulftange CVSS Score: 9.8 Severity: Critical This is the fantastic blog post from the researchers that found it: https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/ Figure out what command you want to...

proofpoint-CVE-2023-0090

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - Unauthenticated RCE CVE: CVE-2023-0090 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Proofpoint...

CVE-2024-4577

CVE-2024-4577 - PHP CGI Argument Injection RCE Summary CVE-2024-4577 is a critical PHP CGI argument injection vulnerability that affects Windows systems running PHP in CGI mode. This flaw allows remote attackers to inject arguments into PHP's command line via specially crafted URLs, leading to...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Unauthenticated Summary FreePBX versions 15, 16, and 17 contain a Remote Code Execution RCE vulnerability caused by insufficient sanitization of user-supplied data in endpoints. An unauthenticated attacker can manipulate the database and achieve remote code execution. Exploit...

CVE-2026-63030-POC

CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 Read the full technical analysis first: CVE-2026-63030: WordPress Pre-Auth RCE Explained This repository contains the proof-of-concept exploit referenced in that article. Start with the blog to understand the vulnerability, limitations, and...

WEB-CLI_RCE_React2Shell

REACT2SHELL 🎯 Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...

Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-

Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post- I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits...

Cerberus-React2Shell-Scanner-Exploit

Cerberus React2Shell - Weaponized Exploitation Framework ██████╗ ███████╗██████╗ ██████╗ ███████╗██████╗ ██╗ ██╗ ██╔════╝ ██╔════╝██╔══██╗██╔══██╗██╔════╝██╔══██╗██║ ██║ ██║ █████╗ ██████╔╝██████╔╝█████╗ ██████╔╝██║ ██║ ██║ ██╔══╝ ██╔══██╗██╔══██╗██╔══╝ ██╔══██╗██║ ██║ ╚██████╗ ███████╗██║...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Remote Code Execution Authenticated 🚨 About the Exploit This is a Bash-based authenticated Remote Code Execution RCE exploit for Tiny File Manager versions = 2.4.6, vulnerable under CVE-2021-40964. The script leverages: Weak upload validation and webroot disclosure, An...

CVE-2025-53770-Exploit

CVE-2025-53770-Exploit First, get the VIEWSTATEGENERATOR, VALIDATIONKEY, VALIDATIONALG value from the target SharePoint page: curl -s https://target.com/layouts/15/start.aspx | grep -oP 'VIEWSTATEGENERATOR" value="\K^"+' curl https://target.com/layouts/15/spinstall0.aspx Then, create a PowerShell...

CVE-2020-13671

CVE-2020-13671 RCE via File Upload — Drupal Core Software: Drupal Core 8.7.5 Affected: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type CISA KEV: Yes — Known Exploited Vulnerability Advisory: SA-CORE-2020-012 What is Drup...

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — fonts.save RCE Probe CVE-2026-56290 BlackHat Team proof-of-concept scanner for the Joomla Page Builder CK fonts.save vulnerability. POC CVE-2026-56290 Author: @mrzblackhat Team: BlackHat Team Credits: Peyman Siyahi · MR.PERSIA Overview This tool probes Joomla sites running the...

CVE-2026-48908

🚨 CVE-2026-48908 — Full Server Compromise via Arbitrary File Upload Critical Unauthenticated File Upload → Remote Code Execution RCE A critical vulnerability in SP Page Builder allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution RCE , potentially leading t...

React2Shell-PoC-CVE-2025-55182

React2Shell CVE-2025-55182 Exploitation Simulation Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability affecting...