CVE-2018-11776

Vulnerable docker container for CVE-2018-11776 docker pull bhdresh/cve-2018-11776:1.0 docker run -dit -p :8080:8080 bhdresh/cve-2018-11776:1.0 PoC PoC - 1 Request : http://:8080/struts2-showcase-2.3.14/$333+333/help.action Result : http://:8080/struts2-showcase-2.3.14/666/help.action PoC - 2...

CVE-2024-38063

CVE-2024-38063 Resumen En agosto de 2024, Microsoft publicó un parche para una vulnerabilidad de ejecución remota de código RCE en TCP/IP de Windows. Algunos investigadores ya han publicado pruebas de concepto PoC para esta vulnerabilidad y, casi al mismo tiempo, los investigadores de PatchPoint...

OpenEMR_Vulnerabilities

OpenEMR Remote Code Execution Vulnerability OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes. PoC git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr -u admin -p...

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver = smtp.gmail.com...

cve-2025-48384-poc

PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...

CVE-2024-53900

CVE-2024-53900 - Mongoose populate.match $where RCE This repository provides a reproducible vulnerable environment and PoC for CVE-2024-53900 , a critical Remote Code Execution RCE vulnerability in Mongoose 8.8.3. 📌 Vulnerability Details CVE : CVE-2024-53900 Affected : Mongoose 8.8.3 Severity :...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

CVE-2025-64087-SSTI-

CVE-2025-64087 SSTI FreeMarker Server-Side Template Injection SSTI in XDocReport allows Remote Code Execution via Apache FreeMarker engine Bug Definition Overview of the vulnerability Server-Side Template Injection SSTI is a web security vulnerability that allows attackers to inject malicious cod...

CVE-2025-49132

CVE-2025-49132 Pterodactyl es un panel de gestión de servidores de juegos gratuito y de código abierto. Antes de la versión 1.11.11, usando /locales/locale.json con los parámetros de consulta locale y namespace, un actor malicioso podía ejecutar código arbitrario sin estar autenticado. Con la...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

CVE-2025-13486

CVE-2025-13486 explotación Plugin ACF Extended para WordPress — Ejecución Remota de Código y Escalada de Privilegios Explotación de la CVE-2025-13486 descubierta por Marcin Dudek dudekmar ⚠️ Aviso legal Este repositorio se proporciona únicamente con fines de investigación y seguridad defensiva. El...

CVE-2025-68613-Python-Exploit

CVE-2025-68613: n8n Workflow Expression RCE Proof of Concept PoC exploit for a critical Remote Code Execution vulnerability in the n8n workflow automation platform. Description The vulnerability exists in the n8n expression evaluation system. User-supplied expressions are not properly sandboxed,...

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" 📖 Usa...

CVE-2024-25082_CVE-2024-25081

⚠️ FontForge RCE — CVE-2024-25081 & CVE-2024-25082 - PoC 📖 Overview Proof-of-concept exploit for two command injection vulnerabilities in FontForge ≤ 20230101 Splinefont component. CVE| Vector| Trigger ---|---|--- CVE-2024-25081| Crafted filename| Direct file open CVE-2024-25082| Crafted archive...

CVE-2026-34159

CVE-2026-34159 Exploit RCE de 0 clics para CVE-2026-34159 en el servidor RPC Lama.cpp versión b8487 exploit fue desarrollado por Hassan Ali @Casp3r0x0 puedes encontrar el artículo completo en https://www.pwntricks.com/ZeroClick-RCE-CVE-2026-34159-llama.cpp...

exploits-rconfig

exploits Three exploits for rconfig = 3.9.4 : CVE-2019-19509 : authenticated RCE CVE-2019-19585 : Local Privilege Escalation root CVE-2020-10220 : unauthenticated SQLi rconfigrootRCEunauth.py : chaining the three CVEs above to get root reverse shell without authentication...

FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain Left: FlowiseAI login page — Right: root shell via CVE-2025-59528 · uid=0root Table of Content...

python-log4rce

Python Log4RCE An all-in-one pure Python3 PoC for CVE-2021-44228. Sample python3 log4rce.py --target "linux" --payload "PAYLOAD" http -X POST --url "http://localhost:8080/" --data "address=" INFO:HTTP:Running on local port 1337 INFO:HTTP:Remote target is http://127.0.0.1:1337/LinuxExploit.class...

Spring-CVE

Spring CVE This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell". CVE-2022-22963 In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing...

CVE-2025-15556-Notepad-WinGUp-Updater-RCE

Affected Software: Notepad++ versions prior to 8.8.9 using the WinGUp updater. Vulnerability Type: Update integrity verification bypass leading to arbitrary code execution. Description: The WinGUp updater fails to properly verify the integrity of update metadata, allowing an attacker who can...