CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....

CVE-2024-8353-PoC

Proof-Of-Concept Code for CVE-2024-8353 This repository contains a script for exploiting the CVE-2024-8353 vulnerability in the GiveWP plugin for WordPress. This vulnerability allows unauthenticated PHP Object Injection, potentially leading to remote code execution. Overview The provided scripts...

CVE-2022-47966-Scan

CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...

CVE-2026-61343-poc-librebooking-rce

CVE-2026-61343-poc-librebooking-rce Librebooking Admin RCE PoC CVE-2026-61343...

CVE-2026-47117-openmed-rce

CVE-2026-47117: OpenMed Unauthenticated Remote Code Execution via PII Model Loading Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2026-47103-python-statemachine-rce

CVE-2026-47103: Python StateMachine Remote Code Execution via SCXML eval Injection Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Usage usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message and exit -w URL,...

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introduction This script provides remote code execution against GitLab Community Edition CE and Enterprise Edition EE. The CVE is an arbitrary file read which allows you to extract the Rails secretkeybase by downloading the GitLab secrets.yaml file. Which in turn, enables you...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

CVE-2017-10271

Brief Description Command execution with echo output Direct shell upload Tested OK on Linux with WebLogic 10.3.6.0 Usage python weblogicwlswsatexp.py -t 172.16.80.131:7001 usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this help message and...

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...

CVE-2026-7275-moodle

CVE-2026-7275-moodle PoC & documentation for CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs — Path Traversal / Arbitrary File Write that can lead to RCE on unpatched Moodle versions. Disclaimer: For authorized security research, auditing, and defensive education only. Do not...

Mercury: Unauthenticated Remote Code Execution via /api/kernels

Mercury runs a JupyterLab server with anonymous access by default mercuryapp/main.py sets --IdentityProvider.token='' when no --token/MERCURYTOKEN is given; when tokenless it also sets --ServerApp.disablecheckxsrf=True. It relies on a blocklist mercuryapp/blockhandler.py BLOCKEDPATTERNS: /lab,...

CVE-2025-10585-The-Chrome-V8-Zero-Day

CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today ⚔️🛡️ Google has released an out-of-band patch this week for CVE-2025-10585 , a serious type-confusion vulnerability in Chrome’s V8 JavaScript / WebAssembly engine. The bug is not theoretical — Google’s Threat Analysis Group confirmed...

CVE-2024-23346-exploit

CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...

CVE-2021-22205

CVE-2021-22205 Fork of mr-r3bot/Gitlab-CVE-2021-22205 Introduction CVE-2021-22205: GitLab Unauthenticated Remote Code Execution Vulnerability Exploit Removed the dependency on djvumake & djvulibre, directly generates payload internally, can be executed on Windows platform. Usage 需要授权 python3...

KubeArmor

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

PoC-for-CVE-2021-38540-

CVE-2021-38540 Proof of Concept Missing Authentication on Critical component Known as CVE-2021-38540 About this bug: The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, variables List Variables PoC Source: POST /variable/varimport HTTP/2 Host:...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...