CVE-2019-3396

CVE-2019-3396 Confluence Widget Connector path traversal CVE-2019-3396 RCE POC POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0 Content-Type:...

CVE-2020-7961-Mass

CVE-2020-7961-Mass CVE-2020–7961 Mass exploit for Script Kiddies Tested on: Kali Linux, Windows,... Requirements: apt install python3 pip3 install requests colorama Usage: python3 rce.py target url | For a single target python3 mass.py list url | For a list target Saved file to: linux.txt, win.tx...

Flowise-CVE-2025-58434-Chain-59528

FlowiseAI CVE Chain - ATO CVE-2025-58434 and RCE CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents This repository contains a Python proof-of-concept for chainin...

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE Alternative Approach: Reverse Shell & Callback Test Overview This repository contains alternative payload approaches for the InvokeAI RCE vulnerability CVE-2024-12029 when SSH key injection fails. The payloads are designed to test if...

CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

CVE-2026-0073

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated network scanner and exploitation tool for CVE-2026-0073 , a vulnerability in the Android Debug Bridge daemon adbd that allows unauthenticated Remote Code Execution RCE and interactive shell access via Wireless Debugging. This tool is...

CVE-2026-0300-POC

🛡️ CVE-2026-0300: PAN-OS User-ID™ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write 📌 Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-ID™ Authentication Portal Captive Portal. This research repository...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

rschunter

RSC Hunter A powerful, multi-threaded scanner and exploit tool for React Server Component RSC vulnerabilities. This tool is designed to identify and exploit RCE vulnerabilities in RSC implementations, supporting various bypass techniques and strategies. Note : Due to the enormous complexity of...

Log4Shell

Log4Shell CVE-2021-44228 ☠️ Log4Shell PoC CVE-2021-44228 Proof-of-concept exploit for the critical Log4Shell vulnerability in Apache Log4j ≤ 2.14.1, which allows remote code execution via JNDI injections. ⚠️ This PoC is for educational purposes and controlled testing in authorized environments...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Proof-of-concept exploit for CVE-2026-48908 , a critical CVSS 4.0 = 10.0 unauthenticated remote-code-execution vulnerability in the SP Page Builder component comsppagebuilder for Joomla, by JoomShaper. | ---|--- CVE| CVE-2026-48908...

CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 Command injection via unsanitized warp:// URI scheme handler. Full writeup at 0day.gg. Summary Property| Value ---|--- CVE| CVE-2024-41997 Vulnerability| Command Injection CWE-77 Target| Warp Terminal macOS Affected| v0.2024.07.16.08.02 Impact| Arbitrary command...

CVE-2019-1367

0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...

PHP2shell

💀 PHP2shell One-click weaponized PoC for CVE-2026-109618 & CVE-2026-109619 Targeting vulnerable PHP + Apache modphp prefork deployments. ⚠️ WARNING: This tool is provided strictly for authorized security testing, CTFs, and educational research. Do not use this against infrastructure you do not own...

CVE-2025-55182

CVE-2025-55182 - React2Shell A modified and boosted exploit for CVE-2025-55182 a pre-authentication Remote Code Execution in React Server version 19.0, 19.1.0, 19.1.1, and 19.2.0 The vulnerability spans the following: react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack Pat...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882/14883/14750 USE 1. clone this repo 2. install requests lib 3. python3 14882.py E.G λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator reference https://github.com/jas502n/CVE-2020-14882...

CVE-2022-24706-CouchDB-Exploit

Apache CouchDB 3.2.1 - Remote Code Execution RCE CVE-2022-24706 Date: 2022-01-21 Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name...

FreePBX-CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exploit chaining two FreePBX vulnerabilities to go from zero access to remote code execution on FreePBX 16. CVE| Component| Impact ---|---|--- CVE-2025-57819| Endpoint module loader brand parameter| Unauthenticated stacked SQL injection...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 and CVE-2025-71260 BMC FootPrints Pre-Authenticated Remote Code Execution Chain BMC FootPrints Pre-Authenticated Remote Code Execution Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if BMC FootPrints instance is vulnerable to...