CVE-2019-11395

CVE-2019-11395 Overview This Proof of Concept PoC demonstrates a Buffer Overflow vulnerability in MailCarrier 2.51, allowing remote attackers to execute arbitrary code via a long string. The vulnerability can be exploited using the following processes: SMTP RCPT TO POP3 USER POP3 LIST POP3 TOP PO...

CVE-2024-5084

Hash Form 9.9.1 file upload vulnerability Exploit The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for...

drupalgeddon2-CVE-2018-7600

Drupal - Drupalgeddon2 CVE 2018-7600 root@kitploit: $ python3 drupalgeddon.py -h + drupalgeddon2 CVE-2018-7600 exploit by Rafael Caria usage: drupalgeddon.py -h --url URL --command COMMAND --function FUNCTION --test --proxy PROXY ! This script exploits CVE-2018-7600 a Drupal property injection in...

GitStackRCE

GitStackRCE GitStackRCE Vulnerability CVE-2018-5955 Exploit...

CVE-2022-29464

CVE-2022-29464 Introduction Critical WSO2 vulnerability CVE-2022-29464 was found by Orange Tsai. The flaw is an unauthorised, unconstrained arbitrary file upload that enables unauthorised users to submit malicious JSP files to WSO2 servers and get Remote Code Execution RCE. Disclaimer: Educationa...

Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc Overview Vulnerability Name：Google Chrome Type Confusion Threat Type：Code Execution Exploitation Likelihood：High POC Status：Publicly Disclosed In-the-Wild Exploitation Status：Not Disclosed EXP Status：Publicly Disclosed Technical Details Status：Publicly Disclosed This...

CVE-2024-6387-Updated-x64bit

CVE-2024-6387-Updated-x64bit Private x64 RCE exploit Python for CVE-2024-6387 02.07.2024 from exploit.in The repository provides a working variant of the CVE-2024-6387 vulnerability exploit with support for real-time active shell, multithreading, entering targets from a file, and color output. 🔥...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2023-50164

Exploit CVE-2023-50164 for HackTheBox Lab Description This exploit was developed specifically for the Strutted lab from HackTheBox , aiming to exploit the vulnerability CVE-2023-50164 in Apache Struts 2. The flaw allows path traversal through a fault in handling file upload parameters. The exploi...

CVE-2021-44228

Log4Shell Proof-Of-Concept This repository is a Proof-Of-Concept for CVE-2021-44228 vulnerability. It is derived from This Repo. In this repository I have made an example of a vulnerable application and a demonstration of how to exploit it. Proof-of-concept Components I have modified the upstream...

CVE-2022-0944_RCE_Automation

I am not the researcher who found the exploit just the author of this code. This code is intended for educational purposes only...

CVE-2017-1000486

CVE-2017-1000486 This is a PoC of CVE-2017-1000486 with some payloads useful to bypass blacklisting lexicographic checks on standard functions used to achieve RCE getClass, exec, etc.. and for retrieving primefaces secret through Padding Oracle in order to be less noisy possible on exploitation...

CVE-2019-5420

CVE-2019-5420 PoC A remote code execution vulnerability in development mode Rails 5.2.2.1, 6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code...

CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

CVE-2024-6387

Vulnerability Description CVE-2024-6387 exploit targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. Due to calling an async-signal-unsafe function in the SIGALRM handler, this vulnerability allows remote code execution as root. Vulnerability Summary Th...

CVE-2023-21716-POC

CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...

ClearML-CVE-2024-24590

root@kitploit: / | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle Artifact Upload PoC This project demonstrates how to dynamically upload a pickle...

cve-2026-41940-tool

🚀 CVE-2026-41940 – cPanel & WHM / WP Squared 인증 우회 공격 도구 cPanel & WHM 및 WP Squared의 치명적인 인증 우회 취약점CVE-2026-41940을 탐지 , 대량 스캔 , 악용 하기 위한 포괄적인 Python 유틸리티입니다. 이 도구는 다중 포트 스마트 스캐닝, 멀티스레딩, Google dork 생성, 대화형 원격 명령 실행RCE, 구조화된 보고서 내보내기를 결합합니다. ⚠️ 경고 – 이 도구는 오직 공인된 보안 테스트 및 교육 목적으로만 사용하도록 제작되었습니다. 소유하지...

CVE-2024-22514-Remote-Code-Execution

CVE-2024-22514: Remote Code Execution in Agent DVR Information Description iSpyConnect.com Agent DVR 5.1.6.0 contains a vulnerability which allows the file triggered by alert commands to be redirected. The modification can allow the commands function to trigger any file on the system under the...

Onapsis_CVE-2025-31324_Scanner_Tools

Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...