326508 matches found
rsfiles-CVE-2026-57827
CVE-2026-57827 — RSFiles! Unauthenticated File Upload → RCE Disclaimer — authorized use only. This is a proof-of-concept for security research and defensive testing. You are responsible for using it only on systems you own or have explicit written permission to test. Misuse against third parties...
CVE-2024-11392
CVE-2024-11392 Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious configuratio...
CVE-2024-47176
PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information Published : 2024-09-26 Base Score : 5.3 MEDIUM EPSS Score : 0.06% Probability of exploitation. Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description : CUPS is a standards-based, open-source printing system, and...
CVE-2016-2098
CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage git clone...
CVE-2025-52078
🚨 CVE-2025-52078 - Unauthenticated Arbitrary File Upload - Writebot SaaS React Template This repository contains a proof-of-concept exploit for an Unauthenticated Arbitrary File Upload vulnerability found in the Writebot – AI Content Generator SaaS React Template. 🧠 Product Page: ThemeForest –...
spring-core-rce
Spring Core RCE/CVE-2022-22965 Affected scope: Spring framework and derivative frameworks with JDK=9 Reference article This script is for learning purposes only. Any legal liability arising from its use for other purposes is solely the responsibility of the user, not the author. 1. Installation...
CVE-2025-41656
CVE-2025-41656 Project Summary This project exists to model CVE-2025-41656 , an unauthenticated remote code execution vulnerability for NodeRED. To model this vulnerability, we created a small form factor SCADA system with a raspberry pi, an actuator, and a sensor. The raspberry pi contains a...
Telerik_CVE-2019-18935
TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...
CVE-2025-55182
CVE-2025-55182 Vulnerability Detection and Exploitation Tool Project Introduction This tool is a GUI tool developed based on Java Swing, used for detecting and exploiting the CVE-2025-55182 vulnerability. This vulnerability is a security flaw in the Next.js framework that allows attackers to...
Magento-CVE-2016-4010
Analysis and Exploitation of Magento Unauthenticated Remote Code Execution Vulnerability CVE-2016-4010 0x00 Preface On May 17, foreign security researcher Netanel Rubin publicly disclosed an unauthenticated remote code execution vulnerability in Magento CVE-2016-4010. This vulnerability actually...
CVE-2021-21220
First install: https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Winx64/848005/ Chrome version: 90.0.4403.0 install chrome-win.zip 1. node server.js run ./chrome.exe --no-sandbox go to localhost:8888 Note that the CVE which this exploits relies on is CVE...
CVE-2023-46604-Analysis
CVE-2023-46604 Analysis A technical analysis repository documenting the root cause, code path, patch points, and reproduction results of Apache ActiveMQ CVE-2023-46604. This document is learning material for technical analysis and defense perspectives on the publicly disclosed vulnerability...
Spring4Shell-POC
Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down Reproduction Process Run...
Laravel-CVE-2018-15133
CVE-2018-15133 - Laravel APPKEY Unserialization Vulnerability White Hat School 3rd Term 28th Class Yebin Lee Virtualization - Vulnerable Docker Configuration https://github.com/yeahhbean/Laravel-CVE-2018-15133 Overview This project is a Docker-based environment set up to verify PoC the...
CVE-2024-24590-ClearML-RCE-CMD-POC
ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...
go-get-rce
This repository does not have a README...
CVE-2022-26809
CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the privileges of the RPC service,...
CVE-2021-26855-CVE-2021-27065
CVE-2021-26855-CVE-2021-27065 analytics ProxyLogo Mail exchange RCE...
Apache-Struts-0Day-Exploit
Apache-Struts-0Day-Exploit Critical Remote Code Execution Vulnerability CVE-2018-11776 Found in Apache Struts. Installation git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ Usage: python ApacheStruts.py URL : www.example.com/ Shell : "Commands" i.e ls, dir, whoami...