339116 matches found
CVE-2023-21608
CVE-2023-21608 Discord Server This bug was Use after Free which was caused during resetForm operation while handling object memory references. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 Advisory CVE-2023-21608 Demo...
CVE-2017-18044-Exploit
CVE-2017-18044 Native POC This is a dead simple POC for the CVE-2017-18044 command injection vulnerability in Commvault v11 SP5 and older. For metasploit users, a ruby version of the exploit is also bundled with the lastest build...
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708 python3 check 0708 A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is...
CVE-2019-0708
CVE-2019-0708 Introduction Microsoft has released its monthly security update for May. Included in this month's Patch Tuesday release is CVE-2019-0708, a critical remote code execution vulnerability that could allow an unauthenticated remote attacker to execute remote code on a vulnerable target...
MiniExploit
MiniExploit WebMin Versions...
CVE-2017-16082
CVE-2017-16082 Overview Affected versions of pg contain a remote code execution vulnerability that occurs when the remote database or query specifies a crafted column name. There are two specific scenarios in which it is likely for an application to be vulnerable: 1. The application executes...
cve-2021-22005-exp
cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...
CVE-2024-29973
CVE-2024-29973 GET /cmd,/simZysh/registermain/setCookie?c0=storageextcgi+CGIGetExtStoInfo+None+and+False+or+import"subprocess".checkoutput"id",+shell=True%23 HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: / Accept-Language: en-US,en;q=0...
CVE-2021-45897
CVE-2021-45897 PoC for CVE-2021-45897 aka SCRMBT-180 - RCE via Email-Templates Authenticated only in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45897 Example usage: .venv ➜ CVE-2021-45897 git:main ✗ ./exploit.py -u user -p --paylo...
CVE-2022-24086
CVE-2022-24086 CVE-2022-24086 POC example provided by BurpRoot CVE-2022-24086: Overview Affected Software: Magento2 CVE ID: CVE-2022-24086 CVSS Score: 9.8 Critical Description CVE-2022-24086 is a critical security vulnerability affecting multiple versions of the Magento2 e-commerce platform. This...
xxl-job
xxl-job Executor RESTful API Unauthorized Access RCE Use the Execution Log Console to Obtain the Results of Successful Command Execution: Example: /joblog/logDetailPage?id=xxxx View the jdk Environment Variables String var3 = System.getProperties.toString; System.out.printlnvar3; Command Executio...
CVE-2026-49869
CVE-2026-49869: Kestra Unauthenticated Remote Code Execution ★PoC and Docker lab for the authentication bypass in Kestra OSS AuthenticationFilter★ Run this lab only on systems you control. The -p 8080:8080 example may publish the vulnerable API on all host interfaces; block access from other...
CVE-2020-10239
Made by HK CVE-2020-10239: Incorrect Access Control in comfields SQL field - RCE PoC Affected version: Joomla core from 3.7.0 to 3.9.15 User requirement: Manager accountLowest-level in back-end Gain access: Change you from Manager to Superadmin, then trigger RCE. Remote Code Execution RCE in Joom...
CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-
CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Usage Reverse shell listener with Ncat root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft...
cve-2021-45232-exp
apisixdashboardrce Don't be evil...
CVE-2021-26828_ScadaBR_RCE
POC CVE-2021-26828ScadaBRRemoteCodeExecution ScadaBR 0.9.1 on Linux and through 1.0 and 1.12.4CE on Windows allows remote authenticated users to upload and execute arbitrary JSP files via 'viewedit.shtm' and Remote Code Execution. Exploit Usage Commands: Windows: $ sudo python WinScadaRCE.py Linu...
Joomla_CVE-2015-8562
JoomlaCVE-2015-8562 A proof of concept for Joomla's CVE-2015-8562 vulnerability Object Injection RCE Intro/Changelog This PoC is the second version of the implementation hosted at exploit-db. -Fixed regenerate session -Added the option to switch from X-Forwarded-For to User-Agent method -Added th...
CVE-2026-20841
CVE-2026-20841 This content corresponds to a part of what is provided through the Monthly Report for PatchPoint subscribers. Overview Microsoft disclosed a patch for an RCE vulnerability in Notepad in February 2026. The vulnerability is a Command Injection vulnerability that occurs in Notepad,...
2017-11882_Generator
CVE-2017-11882 A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. 2017-11882Generator This is ...