340933 matches found
CVE-2021-3007-docker-poc
CVE-2021-3007 β Laminas/Zend HTTP Deserialization RCE This repository contains a fully reproducible Proof-of-Concept and Nuclei exploit template for CVE-2021-3007, a critical PHP deserialization vulnerability in Zend\Http\Response\Stream laminas-http Nuclei exploit template βββ docker-compose.yml...
CVE-2022-26134
CVE-2022-26134 Confluence OGNL expression injected RCECVE-2022-26134 poc and exp Update Add sandbox bypass, high version supported. Usage Usage: python Confluencecve202226134RCE.py http://example.com/ The script will auto check target is vulnerable, and enter a pseudo-interactive shell if it's...
CVE-2022-33980-Apache-Commons-Configuration-RCE
CVE-2022-33980-Apache-Commons-Configuration-RCE...
CVE-2024-6387
CVE-2024-6387 a signal handler race condition in OpenSSH's server sshd Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe...
CVE-2023-22527
CVE-2023-22527 Atlassian Confluence Remote Code Execution Vulnerability CVE-2023-22527 options: -h, --help show this help message and exit -u URL, --url URL Target URL; Example: python .py -u http://ip:port -f FILE, --file FILE Target urllist; Example: python .py -f urllist.txt -c CMD, --cmd CMD...
CVE-2020-10977
GitLab v12.4.0-12.8.1 RCE Based entirely on https://github.com/dotPY-hax/gitlabRCE, which did not work for me and the HTML parsing stuff seemed cumbersome so I rewrote it in js. Usage Start a reverse shell handler in the usual way, then run this script with: TARGETURI="https://target"...
MASS-CVE-2024-27956
MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...
CVE-2021-44077
CVE-2021-44077 Proof of Concept Exploit for CVE-2021-44077: PreAuth RCE in ManageEngine ServiceDesk Plus msiexec.exe pip install the requirements file or make sure you've got the requests package. If you're trying to catch a reverse shell, run your listener first, e.g. nc -l 4444 Then run the...
CVE-2024-47176
PoC: Unauthenticated RCE on cups-browsed π Vulnerability information Published : 2024-09-26 Base Score : 5.3 MEDIUM EPSS Score : 0.06% Probability of exploitation. Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description : CUPS is a standards-based, open-source printing system, and...
n8n-CVE-2025-68613
π₯ n8n CVE-2025-68613 β Remote Code Execution Research This repository contains full vulnerability research, exploitation methodology, detection engineering, and TryHackMe walkthrough for CVE-2025-68613 , a critical Remote Code Execution vulnerability in the n8n workflow automation platform. π CVE...
CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules
CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules CVE-2026-33057 - Mesop Unauthenticated RCE PoC and yara rules Realistically, I'm not sure if it will work, it probably won't work, but you try it anyway... BΔ°O and DONATES : https://guns.lol/hackpatato cve prof:...
CVE-2025-55182
CVE-2025-55182 Scanner & Exploiter !Warning This repository is intended for educational and research purposes only. Use the provided PoCs exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this repository is illegal...
CVE-2025-1094-Exploit
CVE-2025-1094: SQL Injection to RCE via WebSocket π This repository contains a proof of concept PoC exploit for CVE-2025-1094 , a vulnerability in PostgreSQL that allows an SQL Injection SQLi attack to escalate to Remote Code Execution RCE through WebSocket hijacking. Overview This exploit...
UniBLEed
UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...
CVE-2019-16759
CVE-2019-16759 Vbulletin RCE Exploits...
CVE-2020-14321
Python script to exploit CVE-2020-14321 - Moodle 3.9 Course enrolments allowed privilege escalation from teacher role into manager role to RCE. Teachers of a course were able to assign themselves the manager role within that course. Payload extracted from:...
CVE-2026-53576
Kestra Unauthenticated RCE Exploit CVE-2026-53576 Critical Authentication Bypass leading to Unauthenticated Remote Code Execution Exploit β’ Vulnerability Details β’ Impact β’ Remediation β οΈ DISCLAIMER This tool is for educational and authorized security testing purposes only. DO NOT use this against...
CVE-2017-3881-Cisco
CVE-2017-3881 Cisco Catalyst RCE Proof-Of-Concept Apr 10, 2017 Do you still have telnet enabled on your Catalyst switches? Think twice, hereβs a proof-of-concept remote code execution exploit for Catalyst 2960 switch with latest suggested firmware. Check out the exploit code here. What follows is...
CVE-2018-11235
CVE-2018-11235 1. ssh to your vps. 2. Clone this repo: git clone https://github.com/Rezy-Dev/CVE-2018-11235 cd CVE-2018-11235 3. Give exploit.sh execute x permission then execute it: sudo chmod +x exploit.sh sudo ./exploit.sh It downloads apache2 and builds malicious repo for us. 4. Once done we...
ghes-cve-scanner
GHES CVE Scanner Detects whether GitHub Enterprise Server GHES instances are affected by CVE-2026-3854 and CVE-2026-4821. CVE Background CVE-2026-3854 CVSS 8.7 Git Push RCE β The babeld component does not sanitize semicolons in git push options, allowing remote code execution. Affected versions:...