CVE-2024-36401_Geoserver_RCE_POC

Here is the English translation of your README file: ⚠️ Disclaimer: This tool is intended solely for security research and legally authorized testing purposes. Do not use it for any illegal or unauthorized activities. The user assumes full responsibility for any legal consequences. README Version:...

CVE-2021-41773

ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...

poc-cve-2025-55182

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...

ToolShell

Exploit for SharePoint ToolShell. Blog: https://blog.viettelcybersecurity.com/sharepoint-toolshell/ How to use: python exploit.py -u -c Eg: python exploit.py -u http://10.0.1.12/sites/test -c calc @l0gg...

Malicious code in py-worm (PyPI)

Importing py-worm's agentaix module downloads a mutable Python file from https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt to a temporary .py file and launches it without a visible console on Windows. Versions 0.1.0 and 2.0.0 do this directly during import; version...

MAL-2026-17883 Malicious code in py-worm (PyPI)

Importing py-worm's agentaix module downloads a mutable Python file from https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt to a temporary .py file and launches it without a visible console on Windows. Versions 0.1.0 and 2.0.0 do this directly during import; version...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit Toolkit Exploitation tools for CraftCMS Remote Code Execution vulnerability based on SensePost research. 📁 File Description 🎯 Main Tools 1. finalpoc.py - Final optimized POC Supports information disclosure and remote code execution Automatic asset ID discovery...

PageMyadmin_file_upload_getshell

This repository does not have a README...

CVE-2018-16763

CVE 2018-16763 Exploit Introduction PreAuth-RCE on FUEL CMS 1.4.1 Demo Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

CVE-2024-37054-MLflow-RCE

| / || | | || | / \ \ / / | |/| || | | | | | | | | |\ \ /\ / / | | | || | | | | || || | \ V V / || |||||| ||/ // | \ / || | | \ / | | | || | | | | | |/ \ | | | | | | | | /| || | || \ ||| || / | CVE-2024-37054: MLflow Remote Code Execution PoC This repository contains a Proof of Concept...

CVE-2024-9264

🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code Execution RCE and file Read Exploit tool for CVE-2024-9264, a critical vulnerability in Grafana allow authenticated attcker to execute sql query leading to RCE 🛡️ This tool is strictly for educational purposes and authorized penetratio...

GitStackRCE

GitStackRCE GitStackRCE Vulnerability CVE-2018-5955 Exploit...

printix-CVE-2022-29551

CVE-2022-29551 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to install malicious printer drivers...

Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...

CVE-2022-22963

Spring Cloud Function VulnerabilityCVE-2022-22963 Vulnerable Application to CVE-2022-22963 CVE-2022-22963 Exploit Demo https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4 Build docker pull me2nuk/cves:2022-22963 docker run -it -p 8080:8080...

CVE-2025-24016

Wazuh Remote Code Execution RCE - PoC Vulnerability Overview This repository demonstrates the remote code execution RCE vulnerability in the Wazuh server, introduced by an unsafe deserialization in the wazuh-manager package. The vulnerability allows remote attackers with API access compromised...

CVE-2025-62369

CVE-2025-62369 PoC This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener nc -lvnp 2. Run the exploit python3 exploit.py -u "http://:" -s "" -i -p : Xibo CMS server IP : Xibo CMS server port :...

CVE-2024-7591-PoC

CVE-2024-7591-PoC These PoC python scripts test the Kemp LoadMaster for remote code execution. THIS TOOL IS INTENDED FOR TESTING PURPOSES ONLY These scripts were based on Marius Walter's writeup on the specifics of this exploit. You can read their post at:...

Malicious code in py-sock2 (PyPI)

Importing py-sock2's agentaix module downloads a mutable Python file from https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt to a temporary .py file and launches it without a visible console on Windows. Its agentaix console entry point imports the module. The remote...

MAL-2026-17881 Malicious code in py-sock2 (PyPI)

Importing py-sock2's agentaix module downloads a mutable Python file from https://raw.githubusercontent.com/anonrider404/pypl/refs/heads/main/readme.txt to a temporary .py file and launches it without a visible console on Windows. Its agentaix console entry point imports the module. The remote...