CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

CVE-2018-6574

CVE-2018-6574 CVE-2018-6574 go get RCE...

WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 4.4.1 - Authenticated (Custom+) Remote Code Execution vulnerability

Authenticated Custom+ Remote Code Execution vulnerability discovered by khanhnv in WordPress Plugin NextGEN Gallery versions = 4.4.1...

CVE-2019-15107

Webmin applications for versions 1.890 and below are vulnerable to Unauthenticated Remote Code Execution. CVE-2019-15107. Reference : https://github.com/foxsin34/WebMin-1.890-Exploit-unauthorized-RCE...

POC_CVE-2026-41940

POCCVE-2026-41940 Quick start python3 pocCVE-2026-41940.py -h Usage examples Scan one host python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain python3 pocCVE-2026-41940.py -u https://target.example:2086 --action list Run a shell command python3...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Exploit Overview This script exploits an authenticated arbitrary file upload vulnerability in Pluck CMS v4.7.18 CVE-2023-50564. By leveraging this vulnerability, an authenticated attacker can upload a malicious PHP file, enabling the execution of arbitrary code ...

CVE-2021-21110

CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report This repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an internal CGI endpoint vulnerable to Shellshock CVE-2014-6271. Remote...

CVE-2021-40373

CVE-playsms There is a vulnerability in playsms 1.4.3 that allows potential attackers to execute remote code execution. how to reproduce RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms login using admin:admin...

cve-2022-29464

cve-2022-29464 Disclaimer 脚本仅供学习参考，请勿恶意攻击他人网站 如违法乱纪，造成一切后果由使用者自行承担 技术无罪，与作者无关 使用脚本默认同意以上说明！ --Author:lowkey0808 Usage usage: python3 -u url cve-2022-29464 optional arguments: -h, --help show this help message and exit -u 目标url -s 上传的木马,默认上传内置shell.jsp Direct command execution available Webshell...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

CVE-2023-38831

CVE-2023-38831 CVE-2023-38831 is an RCE in WinRAR 6.23 Reference by https://github.com/z3r0sw0rd/CVE-2023-38831-PoC Read up by Google's TAG at: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ Download the latest vulnerable version: 6.22 for...

CVE-2022-45701

EN This project provides a Python script to exploit a remote code execution RCE vulnerability CVE-2022-45701 in certain Arris routers. The vulnerability allows authenticated users to execute arbitrary commands on the device by manipulating SNMP settings via the web interface. Disclaimer : This to...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & RCE CVE-2021-41773 A sophisticated Python-based proof-of-concept PoC exploit for CVE-2021-41773. This tool automates the process of testing Apache 2.4.49 servers for path traversal and remote code execution RCE vulnerabilities. ⚠️ Legal Disclaimer This...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 The following is an actualization of CVE-2018-5767, a vulnerability which exploits an unguarded call to sscanf that occurs when parsing the 'Cookie' header for a password. The...

CVE-2024-36401-GeoServer-RCE

RCE vulnerability in GeoServer CVE-2024-36401 - detection script CVE-2024-36401 is a critical security vulnerability affecting GeoServer, an open-source server for sharing geospatial data, and GeoTools, an open-source Java library that provides tools for geospatial data. The vulnerability,...

CVE-2026-37748

CVE-2026-37748 — Visitor Management System 1.0 - Unrestricted File Upload → RCE Details Field| Info ---|--- CVE ID| CVE-2026-37748 Type| Unrestricted File Upload → Remote Code Execution Severity| High CVSSv3: 7.2 Vendor| sanjay1313 Product| Visitor Management System Version| 1.0 Discoverer| Varad...

CVE-2022-21445-for-12.2.1.3.0-Weblogic

Overview CVE-2022-21445 CVSS 9.8, a vulnerability is an untrusted data deserialization, identified in the ADF Faces component, which can be exploited remotely by attackers without authentication pre-authentication to perform RCE. This vulnerability was discovered by two cybersecurity experts:...