CVE-2026-4802

CVE-2026-4802 - Remote Code Execution via Command Injection in Cockpit A proof-of-concept exploit for CVE-2026-4802, a Remote Code Execution via Command Injection in Cockpit's system logs UI loadServiceFilters Setup Build and run the vulnerable environment: $ docker build -t cockpit-vuln . $ dock...

CVE-2026-25769

CVE-2026-25769 - Remote Code Execution via Insecure Deserialization in Wazuh Cluster A proof-of-concept exploit for CVE-2026-25769, a Remote Code Execution via Insecure Deserialization in Wazuh Cluster Usage: $ python3 poc.py --cmd 'id' Vulnerable Versions Wazuh v4.14.1 Disclaimer This tool is fo...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2025-59287

CVE-2025-59287 WSUS RCE Exploit Automated exploit for Windows Server Update Services WSUS unauthenticated remote code execution vulnerability. Vulnerability Details CVE ID: CVE-2025-59287 CVSS Score: 9.8 Critical Attack Vector: Network Authentication: None required Impact: Remote Code Execution a...

CVE-2026-3502---TrueConf-Client-Update-Hijacking-PoC

🔓 CVE-2026-3502 - TrueConf Client Update Hijacking Exploit ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. 📋 Description Exploit for CVE-2026-3502 - update vulnerability without integrity verification in TrueConf...

atril_cbt-inject-exploit

CVE-2023-44452, CVE-2023-51698: Linux Mint Xreader/MATE Atril CBT File Parsing Argument Injection Remote Code Execution Vulnerability A Critical One-Click RCE/Command Injection Vulnerability Affecting Popular Linux Operating Systems with MATE, Cinnamon, and some Xfce desktop Environments. Affecte...

CVE-2021-46398_Chamilo-LMS-RCE

CVE-2021-46398 Chamilo-LMS 1.11.14 RCE Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page. One-Cli...

CVE-2025-52136

CVE-2025-52136 https://github.com/ricardojoserf/emqx-RCE The original exploitation method uploads an EMQX plugin and adds Erlang os module calls in the plugin template code to execute system commands for RCE. In an outbound network environment, curl is available by default, so you can directly us...

slippy-book-exploit

Slippy-book: EPUB File Parsing Directory Traversal Remote Code Execution CVE-2023-44451 Xreader, CVE-2023-52076AtrilReserved: RCE Vulnerability affected popular Linux Distros including Mint, Kali, Parrot, Manjaro etc. EPUB File Parsing Directory Traversal Remote Code Execution A Critical Path...

CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNING This code executes arbitrary commands on your system. Use ONLY in virtual machines or isolated containers. Description Functional PoC for CVE-2026-0848. Demonstrates how a malicious JAR file can execute arbitrary code when loaded by NLTK...

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- login as admin 2- get any modules edit page 3- inspect element any true radiobox 4- change true to true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- click update 6- to trig command go again edit page CVE-2021-3291 https://vulners.com/cve/CVE-2021-3291 POC...

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - Complete README.md Ready to Copy-Paste CVE-2026-23550 | Massive Modular DS Auth Bypass Exploitation Framework Author: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

moltbot-1click-rce

This repository does not have a README...

CVE-2026-23744-POC

Description This vulnerability exists because MCPJam Inspector exposes internal API endpoints intended for debugging and development. These endpoints accept user-controlled input and pass it directly to system-level process execution without proper validation or sanitization. By sending a crafted...

WSUS-RCE-Mitigation-59287

🚨 CRITICAL CYBERSECURITY ALERT: RCE in WSUS CVE-2025-59287 🚨 CREATOR AND CREDITS: @esteban11121 This guide has been created to help the community quickly mitigate the vulnerability. STATUS: Active Exploitation In-the-Wild Confirmed. This is a Remote Code Execution RCE vulnerability affecting WSUS...

CVE-2025-49844

CVE-2025-49844 – Use-After-Free Issue in Redis's Lua Parser In short and simple terms, you run this script and instead of localhost you provide the target IP and configure its port, it connects if it is vulnerable, and you can execute any command you want. In Shodan, you can also find vulnerable...

CVE-2026-25924

CVE-2026-25924 PoC - Kanboard Admin RCE Proof-of-Concept for Administrative RCE via Security Control Bypass Disclosure: Originally reported by me via GHSA-grch-p7vf-vc4f ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-25924 Severity| 🔴...

tenda-hg10-rce

CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...

CSRF-to-RCE-on-Backdrop-CMS

CSRF to RCE on Backdrop CMS 1.20 This PoC describe how to exploit CSRF on Backdrop CMS Version 1.20 with escalation to RCE. CVE ID CVE-2021-45268 Description The Backdrop CMS version 1.20 allows plugins to be added via ZIP files uploaded to the site. And because it does not have anti-CSRF...

THM---Solar-exploiting-Log-4j

THM---Solar-exploiting-Log-4j This room is based on exploiting the notorious Log4j vulnerability CVE-2021-44228, also referred to as the Log4Shell. The weakness enables attackers to execute a remote code via injection of the malicious payloads into the log messages. TASK 1 – CVE-2021-44228...