341224 matches found
CVE-2012-2982_python
CVE-2012-2982 Exploit python Hello, I am a security researcher and this is my first exploit. Webmin 1.580 has a RCE which is also CVE-2012-2982 To use This payload: 1. download 2. Open in text editor! 3. change targetIP to your target 4. change lhost to your own ip 5. change lport to the port...
CVE-2026-22812-POC
OpenCode CVE-2026-22812 Exploiter Simple Python tols to check and exploit OpenCode vulnerability CVE-2026-22812. Install git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse concurrent-log-handler colorama Basic Usage Check...
CVE-2024-23995
Beekeeper-Studio PoC A Proof-Of-Concept for CVE-2024-23995 vulnerability. 1.Vunerability Overview: Vulnerability Subject: RCE via XSS Vulnerability Version: = Beekeeper-Studio-4.1.13 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, one must insert malicious scripts...
zoneminder-snapshots-rce-poc
Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...
CVE-2026-38751
CVE-2026-38751 — OpenSTAManager Module Upload RCE Authenticated RCE via unvalidated ZIP upload in the module update endpoint. Affected: OpenSTAManager = 2.10.x Requirements pip install requests Usage Reverse shell Penelope or any listener python3 exploit.py -u http://TARGET -U admin -P admin...
CVE-2020-0796
CVE-2020-0796 Remote Code Execution POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access. Intended only for educational and testing in corporate environments. ZecOps...
CVE-2019-16278
CVE-2019-16278 💻 -h3x0v3rl0rd- nostromo 1.9.6 - Remote Code Execution...
Log4Shell-vulnerability-CVE-2021-44228-
Log4Shell Threat Detection CVE-2021-44228 Overview This repository provides an in-depth analysis and implementation of a Machine Learning-based Log4Shell CVE-2021-44228 Threat Detection System. It includes: Understanding Log4Shell : What it is and why it is dangerous Dataset Collection : Sources...
CVE-2024-53677
CVE-2024-53677 - Apache Struts 2 Root Cause Analysis Lab Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal through the file upload functionality in Struts 2. Source This lab...
cachet_2.4.0-dev
CVE-2021-39174 Cachet 2.4.0-dev A python3 script for CVE-2021-39174 Cachet 2.4.0-dev Information Disclosure and RCE via Twig Server Side Template Injection. For the RCE the API KEY for the user is needed. Check out the Leave Songs link below which covers how to get the API KEY via SQL Injection...
CVE-2019-19781
Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh...
CVE-2026-78165
CVE-2026-78165 — camel-spring-redis: unfiltered JDK deserialization of Redis payloads Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-spring-redis, when no serializer option is configured, built a bare JdkSerializationRedisSerializer with...
CVE-2024-23740
CVE-2024-23740 A An issue in Kap through 3.6.0 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...
CVE-2026-47103-python-statemachine-rce
CVE-2026-47103: Python StateMachine Remote Code Execution via SCXML eval Injection Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...
CVE-2021-21972
VMware vCenter Server RCE — CVE-2021-21972 Research Lab Author: Niranjan Pokhrel Independent research project reproducing and documenting a critical, publicly disclosed VMware vCenter Server vulnerability in an isolated home lab, to understand the vulnerability class, exploitation path, and...
cve-2026-27483-lab
CVE-2026-27483 Lab - Enterprise Vulnerability Learning Environment A complete, realistic, enterprise-style Docker-based lab for learning, testing, and defending against CVE-2026-27483 MindsDB Path Traversal → RCE. This repository provides a deployable lab topology, configs, minimal container...
CVE-2022-29465
CVE-2022-29464 go run main.go 请输入目标地址, 如 https://127.0.0.1 https://127.0.0.1:9443 https://127.0.0.1:9443/authenticationendpoint/cmd.jsp?cmd=id...
CVE-2024-53677
CVE-2024-53677 Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution...
CVE-2026-0300-PANOS
CVE-2026-0300-PANOS 🔓 Unauthenticated Remote Code Execution RCE in Palo Alto Networks PAN-OS User-ID Portal 📋 Vulnerability Details Property| Value ---|--- CVE ID| CVE-2026-0300 Vulnerability Type| Unauthenticated Remote Code Execution Affected Component| Palo Alto Networks PAN-OS User-ID Portal...
CVE-2026-14669
CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar function has a heap buffer overflow vulnerability when handling timezone formatting. By setting an overly long POSIX timezone abbreviation, an attacker can trigger an out-of-bounds write to a fixed...