CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Unauthenticated Remote Code Execution via Angular-Base64-Upload Library for more details: blog Introduction angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the angular-base64-upload/demo/server.p...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...

cve-2026-21877-rce

This repository does not have a README...

CVE-2023-32315

CVE-2023-32315 Openfire Console Authentication Bypass Vulnerability with RCE plugin Setup git clone https://github.com/miko550/CVE-2023-32315.git cd CVE-2023-32315 pip3 install -r requirements.txt Usage python3 CVE-2023-32315.py -t http://127.0.0.1:9090 python3 CVE-2023-32315.py -l lists.txt Step...

CVE-2019-10758

CVE-2019-10758 PoC Setup docker run -p 27017:27017 -d mongo npm install [email protected] cd nodemodules/mongo-express/ && node app.js cURL exploit curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw==' --data 'document=this.constructor.constructor"return...

POC-CVE-2026-19286

Description Proof of concept exploit code for CVE-2026-19286 Usage python3 poc.py -url -uname -pword -c...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC Exploit alt text ExploitDB Dompdf versions 1.2.1 are vulnerable to Remote Code Execution RCE by injecting CSS into the data. The file can be tricked into storing a malicious font with a .php file extension in its font cache, which can later be executed b...

CVE-2019-7609

CVE-2019-7609 exploit CVE-2019-7609kibana RCE on right way by python2 scripts snapshot usage python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit -u URL such as:...

Log4j-RCE-Scanner

Feature • Requirements • Installation • Usage • Contact RCE scanner for Log4j Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Affected versions If you want to scan with a domain name, you must additionally install...

CVE-2025-59287-PoC

CVE-2025-59287 / CVE-2023-35317 PoC Inside CVE-2025-59287: SoapFormatter RCE in WSUS: https://shellcode.blog/wsus-cve-2025-59287-investigation/ This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intende...

CVE-2019-3396

CVE-2019-3396 Confluence Unauthorized RCE CVE-2019-3396 Vulnerability Pitfall: Some versions require adding Referer to succeed File Read POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:55.0 Gecko/20100101 Firefox/55.0 Accept:...

OpenSTAManager-RCE-Exploit-CVE-2026-38751

OpenSTAManager RCE Exploit CVE-2026-38751 Arbitrary File Upload leading to Remote Code Execution Full-featured proof-of-concept for CVE-2026-38751 , written in Rust. Warning: This tool is intended for authorised security testing and educational purposes only. Use it only on systems you own or hav...

CVE-2022-21587-Oracle-EBS-

Prerequirement for this exploit to run: python3 including module requests, os, sys, slipit uuencode Before you run, make sure to use for only on ethical duties if the exploit Fail to run: Make sure you already install the pre req module install requests pip3 install requests Install slipit, git...

EUVD-2026-114701

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the renderimage function. This is due to unrestricted mass assignment of caller-supplied metadata keys onto the image model...

CVE-2026-76010

The NextGEN Gallery plugin for WordPress (versions up to and including 4.4.1 ) is vulnerable to Remote Code Execution (RCE) via the render_image function. The root cause is a combination of unrestricted mass assignment of caller-supplied meta_data keys onto the image model, missing realpath conta...

CVE-2019-2729_creal

CVE-2019-2729 - creal PoC for exploiting CVE-2019-2729 on WebLogic Exploit Usage python3 creal.py -h usage: creal.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --command CMD command -s SH,...

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Disclaimer: This repository is intended for educational and authorised security research purposes only. All techniques demonstrated here should only be used against systems you own or have explicit written permission to test. The...

WSOB

😭 WSOB CVE-2022-29464 😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464. CVE-2022-29464 details: Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a...