332448 matches found
MetabaseRceTools
MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...
PAN-OS-User-ID-Buffer-Overflow-PoC
π‘οΈ CVE-2026-0300: PAN-OS User-IDβ’ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write π Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-IDβ’ Authentication Portal Captive Portal. This research repository...
CVE-2026-42167
CVE-2026-42167: SQL Injection in ProFTPD modsql π Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...
CVE-2017-10271
Brief Description Command execution with echo output Direct shell upload Tested OK on Linux with WebLogic 10.3.6.0 Usage python weblogicwlswsatexp.py -t 172.16.80.131:7001 usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this help message and...
jdwp-shellifier
JDWP exploitation script What is it ? This exploitation script is meant to be used by pentesters against active JDWP service, in order to gain Remote Code Execution. How does it work ? Well, in a pretty standard way, the script only requires a Python 2 interpreter: % python ./jdwp-shellifier.py -...
CVE-2021-44228
CVE-2021-44228 Apache Log4j Remote Code ExecutionοΌ all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x has other vulnerabilities, it is recommended to update to the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: Download this project, compi...
CVE-2020-1493
CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...
Next.js-RSC-RCE-Scanner-CVE-2025-66478
Next.js-RSC-RCE-Scanner-CVE-2025-66478 CVE-2025-66478 Next.js vulnerability scanner. Detects whether a website is using a version of Next.js affected by the RSC React Server Components RCE vulnerability. Installation and Execution Using uv Recommended uv is a fast Python package manager. 1...
Simulation_CVE-2024-46256
CVE-2024-46256 & CVE-2024-46257 β PoC Simulation Overview This repository contains a step-by-step, image-backed Proof of Concept PoC simulating two vulnerabilities in Nginx Proxy Manager that enable OS Command Injection, leading to Remote Code Execution RCE after authentication. Affected product:...
Automation-for-Juniper-cve-2023-36845
Automation for Juniper CVE:2023-36845 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of IP addresses, sends a request to each, and determines whether the system is vulnerable based on the response. Usage To use the script, run it fro...
CVE-2025-5394
π¨ CVE-2025-5394 - Unauthenticated Arbitrary Plugin Upload in Alone Theme π Affected Product: Alone β Charity Multipurpose Non-profit WordPress Theme Versions: π Example Usage: python3 CVE-2025-5394.py -help usage: CVE-2025-5394.py...
CVE-2017-8464-EXP
CVE-2017-8464-EXP Support x86 and x64 Just for test Lnk file from: https://github.com/rapid7/metasploit-framework/pull/8767 Thanks to ykoster Small change,replace the dll file,fix the bug of crashing explorer.exe.ykoster has fixed this bug POC: x86: x64: If you can determine the USB drive,one LNK...
Confluence-RCE
Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy For communication and learning purposes only...
CVE-2026-24061-telnet2root
CVE-2026-24061 Vulnerability Scanner & Exploit π¨βπ» Author: Furkan KAYAPINAR @FurkanKAYAPINAR Overview This repository contains a vulnerability scanner and an interactive exploit for CVE-2026-24061. This vulnerability affects inetutils-telnetd and potentially other Telnet implementations through...
CVE-2021-1675
CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...
CVE-2021-42013
CVE-2021-42013 Vulnerability Scanner This Python script checks for the Remote Code Execution RCE vulnerability CVE-2021-42013 in Apache 2.4.50. Introduction This script is designed to help identify if a server is vulnerable to the CVE-2021-42013 RCE vulnerability in Apache 2.4.50. It checks the...
CVE-2026-32996
CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...
CVE-2024-21413
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC π Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py π οΈ Features...
PCmanBoF
PCman FTP Server Buffer overflow and Remote Code Execution CVE-2013-4730 A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7 How it works? That easy BoF overwrite the buffer and execute the shellcode that will connect back reverse shell Vuln machines: WindowsXP SP...
KubeArmor
KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...