CVE-2023-38035-MobileIron-RCE

MobileIron CVE-2023-38035 Exploit README.md Description This bash script automates the process of scanning for vulnerable MobileIron systems that are susceptible to the CVE-2023-38035 exploit. The script performs multiple checks, including checking for required programs, downloading potential...

wp_CVE-2020-35489_checker

wpCVE-2020-35489checker CVE-2020-35489 - Introduction The wpCVE-2020-35489checker is a Python command-line tool designed to check if a WordPress website is vulnerable to CVE-2020-35489. This particular vulnerability stems from a security flaw in the WordPress Contact Form 7 plugin versions before...

cve-2026-9082-drupal-postgresql-rce

CVE-2026-9082 Drupal PostgreSQL SQLi to RCE This repository contains a local lab and a short exploit for the Drupal JSON:API PostgreSQL SQL injection described in the Ambionics article. The important part of the exploit is the PostgreSQL escalation: once the injection can evaluate a SELECT...

CVE-2026-58025

CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...

CVE-2022-0543-Home-Lab

CVE-2022-0543 — Redis Lua Sandbox Escape Remote Code Execution CVE‑2022‑0543 — Redis Lua Sandbox Escape คืออะไร? ช่องโหว่นี้เกิดเฉพาะบน Redis ที่ติดตั้งผ่าน Debian / Ubuntu package เท่านั้น เพราะ Redis ถูกคอมไพล์พร้อม Lua engine แบบ dynamic module lua-cjson, lua-bitop ทำให้ผู้โจมตีสามารถเรียกใช้:...

CVE-2021-44228_Example

CVE-2021-44228Example Run each of the 3 sections in a spearate tab/console marshalsec LDAP server https://github.com/chilliwebs/marshalsec Forked from https://github.com/mbechler/marshalsec docker build -t marshalsec marshalsec/. docker run -it --rm -p 1389:1389...

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...

CVE-2019-14745

CVE-2019-14745 weaponized radare2 vulnerability CVE-2019-14745 assigned found by @CaptnBanana and blenk92 For details about vulnerability, read https://bananamafia.dev/post/r2-pwndebian/ Usage First of all, you need Python bindings of LIEF https://lief.quarkslab.com/ Then, run script as: python...

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner A full-featured exploitation utility for CVE-2025-55182 — Remote Code Execution via React Server Components in Next.js. The scanner automatically crafts the multipart payload and abuses process.mainModule.require'childprocess'.execSync to achieve arbitrary OS comma...

CVE-2015-8351

gwollebuster this script is exploit for wordpress old plugin gwolle usage: ./gwollebuster.py first arguments = your target url of wordpress that installed gwolle second arguments = your ip third arguments = listening port for reverse shell example: ./gwollebuster.py http://vulnpress.com/...

CVE-2019-7609

CVE-2019-7609 Kibana Exploit for CVE-2019-7609 in python This exploit can give you RCE NOTE:- THIS IS THE MODIFIED VERSION Help Listening on port 4242 Running exploit Initial Access...

CVE-2022-35914_poc

CVE-2022-35914poc Modified for GLPI Offsec Lab: calluserfunc, arraymap, passthru References Modified to work for Proving Grounds Practice Lab: GLPI https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc/blob/main/CVE-2022-35914.p...

CVE-2015-3306-Home-Lab

ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

fastjson-1.2.58-rce

fastjson-1.2.58-rce need: fastjson autoType is enabled h2 database and some jar . ├── fastjson-1.2.58.jar ├── h2-1.4.199.jar ├── jackson-annotations-2.9.8.jar ├── jackson-core-2.9.8.jar ├── jackson-databind-2.9.8.jar └── logback-core-1.3.0-alpha4.jar Download fastjson-1.2.58.jar...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

CVE-2026-25643-Frigate-RCE

CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...

CVE-2023-46818

CVE-2023-46818 - ISPConfig PHP Code Execution | Exploit High Remote Code Execution in ISPConfig PoC implementation. Resume ISPConfig versions /admin/languageedit.php — ISPConfig vulnerable endpoint 🚀 Launching the Exploit Run the exploit script CVE-2024-47533.py. python3 CVE-2023-46818.py -u -U -...

CVE-2019-15107_webminRCE

CVE-2019-15107webminRCE unauthorized RcE exploit for webnin 1.920 modified version of https://github.com/jas502n/CVE-2019-15107 POC https://asciinema.org/a/YzMmXQyvZcsBF9OzccXxmHmyQ...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat Remote Code Execution on Windows - CGI-BIN Apache Tomcat Remote Code Execution on Windows cgi-bin Usage: Usage: python CVE-2019-0232.py url cmd Test Environment: jdk8 apache-tomcat-8.5.39...