bluekeep

Description This script checks multiple IP addresses for the BlueKeep vulnerability CVE-2019-0708, which is a critical Remote Desktop Protocol RDP vulnerability found in older versions of Windows operating systems. The vulnerability allows attackers to remotely execute code on a target machine...

CVE-2025-1307

Newscrunch Exploit CVE-2025-1307 🚨 Overview This exploit targets a critical vulnerability CVE-2025-1307 in the Newscrunch WordPress theme. The flaw allows authenticated users Subscriber and above to upload arbitrary files due to missing capability checks in the newscrunchinstallandactivateplugin...

CVE-2023-46604

Technical Summary of the Attack: CVE-2023-46604 The script exploits an insecure deserialization vulnerability in Apache ActiveMQ CVE-2023-46604 to achieve remote code execution on the target server. Description of the Exploitation Process Vulnerability Target: The vulnerability resides in the...

patch-CVE-2026-15502

Patch: CVE-2026-15502 Vulnerability Details CVE : CVE-2026-15502 Product : Microsoft Exchange Server Description : SSRF leading to RCE Severity : Critical Patch Status: IN-REVIEW Field| Value ---|--- Patch Date| 2026-06-01 Status| in-review Deployed To| Production Validated By| SecOps Team...

CVE-2020-16947

CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

CVE-2026-55200

CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability Critical Pre-Authentication Memory Corruption Vulnerability in libssh2 Overview Field| Detail ---|--- CVE| CVE-2026-55200 CVSS| 9.2 Critical Type| Out-of-Bounds Write Component| libssh2 Affected Versions| = 1.11.1 Attack Vector...

React2Shell-Exploit-CVE-2025-55182

💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗ █████╗ ██████╗████████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔══██╗██╔════╝╚══██╔══╝╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝█████╗ ███████║██║ ██║ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔══██╗██╔══╝ ██╔══██║██║ ██║...

CVE-2026-38751

CVE-2026-38751 — OpenSTAManager Module Upload RCE Authenticated RCE via unvalidated ZIP upload in the module update endpoint. Affected: OpenSTAManager = 2.10.x Requirements pip install requests Usage Reverse shell Penelope or any listener python3 exploit.py -u http://TARGET -U admin -P admin...

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE Based entirely on https://github.com/dotPY-hax/gitlabRCE, which did not work for me and the HTML parsing stuff seemed cumbersome so I rewrote it in js. Usage Start a reverse shell handler in the usual way, then run this script with: TARGETURI="https://target"...

CVE-2026-103442

CVE-2026-103442: CentralAuth MergeAccount object injection Reporter: Marco Paciaroni BomboBombone. CentralAuth accepted a browser-supplied merge-session key when decoding migration state. A user with the centralauth-merge right could substitute a key that produced a PHP object graph. The report's...

CVE-2019-0709

CVE-2019-0708 BlueKeep Exploit CVE-2019-0708 RCE and Crash Exploit using Python Crash Exploit Published Usage: python3 crashexploit.py 127.0.0.1 64 RCE Exploit Not Published Usage: python3 exploitrce.py 127.0.0.1 payload...

CVE-2020-0601

CVE-2020-0601 Remote Code Execution Exploit CVE-2020-0601- Citrix Application Delivery Controller & Gateway...

n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate

n8n God Mode Ultimate - CVE-2025-68613 Scanner & Exploitation Framework Advanced n8n Workflow Automation RCE Scanner & Exploitation Tool 🎯 Overview n8n God Mode Ultimate is a comprehensive security testing framework designed to detect and validate CVE-2025-68613 in n8n workflow automation...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — my friend Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Repo Contents File|...

through_the_wire

Through the Wire Through the Wire is a proof of concept exploit for CVE-2022-26134, an OGNL injection vulnerability affecting Atlassian Confluence Server and Data Center versions = 7.13.6 LTS and = 7.18.0 "Latest". This was originally a zero-day exploited in-the-wild. Vendor advisory Volexity...

cve-2022-1471-jira-lab

CVE-2022-1471 — SnakeYAML RCE lab Jira / Automation for Jira context Offline, self-contained lab proving the mechanism behind CVE-2022-1471 SnakeYAML unsafe deserialization → RCE, CVSS 9.8, as used in the Jira / Jira Service Management finding against a host running 9.4.9 affected range...

CVE-2024-26304-RCE-exploit

CVE-2024-26304 - Remote Code Execution Vulnerability in ArubaOS Overview CVE-2024-26304 is a critical remote code execution RCE vulnerability affecting ArubaOS due to a buffer overflow in its L2/L3 Management service. An attacker can exploit this by sending specially crafted packets to the PAPI...

mgo3-rce

MGO3 RCE This repository contains information regarding CVE-2026-19874. documentation video demo Timeline 2026-06-26: vulnerability is discovered 2026-06-26: first contact with Konami 2026-07-01: vulnerability is reported to Konami 2026-08-04: vulnerability is silently patched by Konami...

CVE-2022-22965-Spring4Shell

Spring4Shell Spring4Shell CVE-2022-22965 Proof Of Concept with a vulnerable Tomcat server with a vulnerable spring4shell application. Details about this vulnerability https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...