React-Server-Components-RCE

React Server Components Remote RCE Exploitation Tool 📖 Tool Introduction React Server Components Remote RCE Exploitation Tool is a security testing tool specifically designed for remote code execution vulnerabilities in React Server Components and Next.js frameworks. It provides a graphical user...

CVE-2023-34468-PoC

CVE-2023-34468 PoC for Apache NiFi Educational proof-of-concept PoC for CVE-2023-34468 affecting Apache NiFi versions prior to 1.22.0. This repository demonstrates how abuse of H2 JDBC URL configuration can lead to authenticated remote code execution RCE in vulnerable Apache NiFi installations...

CVE-2025-55182-EXP

CVE-2025-55182 Exploitation Tool Tool Introduction This tool is used to detect and exploit the CVE-2025-55182 vulnerability presumably a code execution vulnerability in frameworks related to Next.js. It supports single-target / multi-target batch detection, command execution, interactive shell, a...

CVE-2023-43208-PoC

Mirth Connect RCE Exploit CVE-2023-43208 This script is a Proof of Concept PoC for the Remote Code Execution RCE vulnerability in Mirth Connect versions prior to 4.4.1. It exploits an XStream deserialization vulnerability through the API. Requirements Python 3.10 or higher Compatible with 3.13...

CVE-2026-33454

camel-mail Header Injection → RCE Vulnerability Reproducer CVE-2026-33454 This project demonstrates a Camel message header injection vulnerability in Apache Camel's camel-mail component, tracked as CVE-2026-33454. An attacker who can deliver an email to a mailbox monitored by a Camel mail consume...

Strutter

Strutter Proof of Concept for CVE-2018-11776, comes complete with the ability to search Shodan API for targets CVE-2018-11776 Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper actions...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.6.1 Remote Code Execution Authenticated Proof of Concept PostgreSQL Database from version 9.6.1 are vulnerable to Authenticated Remote Code Execution. Even if it isn't considered to be a vulnerability itself by the development team, this could be leveraged to gain...

smartermail-CVE-2026-23760-poc

SmarterMail-CVE-2026-23760-poc A proof-of-concept exploiting an authentication bypass via password reset API for the SmaretMail system administrator account. Vulnerability The vulnerability exists due to an authentication bypass vulnerability in the password reset API. The force-reset-password...

CVE-2026-32475-PoC

CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File Upload → RCE Proof-of-concept for CVE-2026-32475 CVSS 9.0: an unauthenticated arbitrary file upload vulnerability in the Elementor Pro WordPress plugin ≤ 4.2.1 that leads to remote code execution. | ---|--- CVE| CVE-2026-32475 CVSS| 9....

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613

n8n Authenticated Expression Injection RCE – CVE-2025-68613 Critical Remote Code Execution CVSS 9.9 in n8n Workflow Automation Tool Proof of Concept – For educational and authorized security research use only ⚠️ Important Legal Warning This code is provided STRICTLY for educational purposes and...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...

springcloudRCE

springcloudRCE Spring Cloud Gateway RCE - CVE-2022-22947...

CVE-2026-0073

0-Click RCE on Android Critical vulnerability CVE-2026-0073 in Android ADB, an authentication bypass flaw in the TLS certificate verification of the adbd daemon, specifically in the adbdtlsverifycert function. The TLS certificate verification makes Wireless Debugging accept an attacker as if they...

CVE-2026-78006-POC

CVE-2026-78006-POC POC for CVE-2026-78006 The Events Calendar = 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution CONTACT telegram for any ask : @soldout0O 💙 Support the Project If you appreciate my work, consider supporting the project via USDT TRC20:...

CVE-2026-1555

CVE-2026-1555 WebStack = 1.2024 - Unauthenticated Arbitrary File Upload 👤 By: Nxploited 🔗 Nxploited ZeroDay Hub — t.me/KNxploited 💀 CVE-2026-1555 — WebStack WordPress Arbitrary File Upload Unauthenticated Remote Code Execution viaimgupload AJAX handler 📌 Vulnerability Overview Field| Detail ---|-...

pinky

Uploading a webshell is almost always the next step after exploiting a web vulnerability, but services like Cloudflare and the new generation of firewalls do a really good job preventing attackers to run commands in the target via HTTP or HTTPS. On the other hand, text content filtering and...

CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

CVE-2018-9276

CVE-2018-9276 — PRTG Network Monitor ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details...