335020 matches found
CVE-2023-39361
CVE-2023-39361 Unauthenticated SQL injection in Cacti v1.2.24 Overview Cacti is an open-source operational monitoring tool written in PHP, MySQL/MariaDB, which provides a friendly interface. The vulnerability was found in 2023 which affected all versions before 1.2.24. This security flaws lies in...
CVE-2024-51567-RCE-EXPLOIT
CVE-2024-51567-RCE-EXPLOIT cbyerpanel rce exploit...
CVE-2023-41425
CVE-2023-41425 Description A Cross Site Scripting vulnerability in Wonder CMS Version 3.2.0 to Version 3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. This is a modifed version of the original exploit by prodigiousMind which...
CVE-2025-5548
๐CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 ๐ฏ Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...
PrintNightmare
Windows Print Spooler Service RCE CVE-2021-1675 PrintNightmare How to disable the Print Spooler service ? CMD Shell net start | findstr -i "spooler" net stop spooler REG ADD "HKLM\SYSTEM\CurrentControlSet\Services\Spooler" /v "Start " /t REGDWORD /d "4" /f PowerShell Get-Service -Name Spooler...
CVE-2019-19781-CitrixRCE
Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781 References: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ Bypassing: 1 - Deleted / Modified scripts at: /vpn/../vpns/portal/scripts/ 2 - Forward Slash "/" issues after perl commnad...
CVE-2026-58138
๐จ CVE-2026-58138 โ Unauthenticated Remote Code Execution ๐ฅ Critical Unauthenticated Remote Code Execution in Conductor Affected versions:3.21.21 โ 3.30.2 ๐ Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE...
CVE-2025-7769
CVE-2025-7769 โ Remote Command Injection in mobileapi Description : This repository contains a ProofโofโConcept PoC exploit for CVEโ2025โ7769 , a critical remote Command Injection vulnerability found in Tigo Energy CCA appliances exposing the /cgi-bin/mobileapi endpoint. The vulnerability is...
CVE-2018-2628
CVE-2018-2628 WebLogic Deserialization Vulnerability Reproduction weblogic getshell python CVE-2018-2628-Getshell.py ip port shell1.jsp C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /| | | | | || | | / / | | | |...
Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner
Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner...
spring4shell-poc
Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...
CVE-2024-23692
CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...
Liferay-CE-Portal-Java-Deserialization
Liferay-CE-Portal-Java-Deserialization This repo contains PoC for the remote code execution vulnerability of Liferay CE Portal! Payloads I already shared payloads in repo. You must find the right syntax by brute-force method.Payloads I share are for time-based proof of concept sleep 10. The...
React2Shell-CVE-2025-55182
CVE-2025-55182 โ React2Shell Unauthenticated RCE in React Server Components via insecure deserialization of the Flight protocol. A single HTTP request is enough to execute arbitrary code on the server โ no credentials, no prior access needed. / / / /| |/ / \ / / / / / / / / // / / // / // | //...
CVE-2021-29200
CVE-2021-29200 CVE-2021-29200 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user. Trigger Command Execution EXP 1. Start RMI listener on VPS port 9999...
Confluence_CVE-2021-26084
ConfluenceCVE-2021-26084 Remote Code Execution on Confluence Servers : CVE-2021-26084 PoC Confluence Possible exploit endpoints https:///login https:///pages/templates2/viewpagetemplate.action https:///template/custom/content-editor https:///templates/editor-preload-container...
CVE-2025-55182
CVE-2025-55182: React2Shell - Next.js Remote Code Execution Toolkit !WARNING This tool is provided for authorized testing and educational purposes only. Unauthorized network access and data exfiltration are illegal. Users are responsible for ensuring they have proper authorization before using th...
CVE-2025-5394
๐จ CVE-2025-5394 - Unauthenticated Arbitrary Plugin Upload in Alone Theme ๐ Affected Product: Alone โ Charity Multipurpose Non-profit WordPress Theme Versions: ๐ Example Usage: python3 CVE-2025-5394.py -help usage: CVE-2025-5394.py...