CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Research Comprehensive research to save you time, energy, sanity, & understanding. I want to start this off by saying that this specific CVE is like many in that due to its high severity score, it has gained an enormous amount...

CVE-2026-45829

🚨 CVE-2026-45829 - ChromaDB Pre-Auth RCE Critical Remote Code Execution in ChromaDB Vector Database 📌 Overview CVE-2026-45829 is a critical pre-authentication Remote Code Execution vulnerability in ChromaDB , a popular open-source AI Vector Database. An unauthenticated attacker can exploit the wa...

cve-2021-1647

CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability INFO Password:infected...

CVE-2022-30778

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503. Requirement PHP = 8.0 Composer Recover vulnerability 1. Startup service composer install cp .env.example .env php artisan key:generate php artisan serve it will listening 8000 port in localhost 2. PoC queueResolver...

spring-core-rce

spring-core-rce spring core rce simple exploitation A war file is available at https://github.com/fengguangbin/spring-rce-war For Docker environment, you can use https://github.com/lunasec-io/Spring4Shell-POC You can also use the online environment at http://vulfocus.io/ or the vulhub vulnerable...

CVE-2022-0848

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Change the host in bash file and run...

CVE-2018-14667-poc

CVE-2018-14667-poc Richfaces Vulnerability Environment and PoC Target Range: Deploy the war package under vulenvironment directly into tomcat PoC build:build artifactId run:java -jar CVE-2018-14667-poc.jar "cmd" about debug Directly extract the war under the vulenvironment's war package, then...

CVE-2020-8813

CVE-2020-8813 El exploit oficial para la ejecución remota de código en Cacti v1.2.8 CVE-2020-8813 Cacti v1.2.8 Ejecución Remota de Código Pre-Autenticación Cacti v1.2.8 Ejecución Remota de Código Post-Autenticación...

CVE-2025-55182-React2Shell

CVE-2025-55182-React2Shell xpl0ited by infrar3d A 10.0 critical severity vulnerablility affecting server-side use of React.js, tracked as CVE-2025-55182 in React.js and CVE-2025-66478 specifically for the Next.js framework. This vulnerability was responsibly disclosed by Lachlan Davidson on 29...

ProxyLogon

ProxyLogon For Python3 ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists user's mail. --mail...

cve-2010-2075-analysis

CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...

CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 Critical Microsoft SMBv1 Remote Code Execution Vulnerability 📌 Overview EternalBlue is a critical vulnerability in Microsoft's Server Message Block version 1 SMBv1 protocol that allows remote attackers to execute arbitrary code on vulnerable Windows systems without...

CVE-2021-1675

CVE-2021-1675 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Installation Before running the exploit you need to install my...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot exploit for the FreePBX Endpoint Manager unauthenticated SQL injection CVE-2025-57819, chained into remote code execution via the FreePBX cronjobs table. For authorized security testing / CTF use only. Vulnerability The endpoint module'...

CVE-2022-29465

CVE-2022-29464 go run main.go 请输入目标地址, 如 https://127.0.0.1 https://127.0.0.1:9443 https://127.0.0.1:9443/authenticationendpoint/cmd.jsp?cmd=id...

WhatsAppHACK-RCE

WhatsAppHACK-RCE...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...

apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...

CVE-2022-23529-Exploration

CVE-2022-23529 The JSON Web Token JWT library versions prior to 3.4.6, 4.0.4, and 4.1.5 are vulnerable to RCE. The HMAC hashing functions take any string as input which leads to RCE. Due to the preconditions, this vulnerability is not likly to be exploitable. In order to exploit this vulnerabilit...

Apache-Druid-CVE-2021-25646-Exploit

Apache Druid RCE Exploit CVE-2021-25646 Python exploit for Apache Druid Remote Code Execution via JavaScript code injection CVE-2021-25646. Description This script exploits an RCE vulnerability in Apache Druid versions 0.20.1 that allows arbitrary code execution through specially crafted sampler...