PoC-CVE-2025-55182

PoC: CVE-2026-33017 A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code...

PageMyadmin_file_upload_getshell

This repository does not have a README...

CVE-2018-16763

CVE 2018-16763 Exploit Introduction PreAuth-RCE on FUEL CMS 1.4.1 Demo Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

CVE-2024-9264

🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code Execution RCE and file Read Exploit tool for CVE-2024-9264, a critical vulnerability in Grafana allow authenticated attcker to execute sql query leading to RCE 🛡️ This tool is strictly for educational purposes and authorized penetratio...

CVE-2024-37054-MLflow-RCE

| / || | | || | / \ \ / / | |/| || | | | | | | | | |\ \ /\ / / | | | || | | | | || || | \ V V / || |||||| ||/ // | \ / || | | \ / | | | || | | | | | |/ \ | | | | | | | | /| || | || \ ||| || / | CVE-2024-37054: MLflow Remote Code Execution PoC This repository contains a Proof of Concept...

printix-CVE-2022-29551

CVE-2022-29551 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to install malicious printer drivers...

CVE-2025-24016

Wazuh Remote Code Execution RCE - PoC Vulnerability Overview This repository demonstrates the remote code execution RCE vulnerability in the Wazuh server, introduced by an unsafe deserialization in the wazuh-manager package. The vulnerability allows remote attackers with API access compromised...

S2-055

S2-055 Deserialization Vulnerability Exploit CVE-2017-7525 Exploitation Process javac ExploitCommand.java package exploit; import com.sun.org.apache.xalan.internal.xsltc.DOM; import com.sun.org.apache.xalan.internal.xsltc.TransletException; import...

CVE-2017-15220-vxsearch-rce

CVE-2017-15220 – VX Search Enterprise Remote Buffer Overflow Remote buffer overflow vulnerability in VX Search Enterprise 10.1.12. Vulnerability Details CVE: CVE-2017-15220 Product: VX Search Enterprise Version: 10.1.12 Impact: Remote Code Execution Description VX Search Enterprise 10.1.12 is...

cve-2022-22963

Spring Cloud Function SpEL - cve-2022-22963 Build $ git clone https://github.com/twseptian/cve-2022-22963.git $ cd cve-2022-22963 $ docker build . -t spring-spel-0day $ docker run -p 8080:8080 --name spring-spel-0day spring-spel-0day Payload...

CVE-2019-8985

firmware and exp for CVE–2019–8985 Netis WF2411 RCE study :...

CVE-2022-30190

CVE-2022-30190 On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Background pfBlockerNG is the Next Generation of pfBlocker with the following features: 1. Manage IPv4/v6 List Sources into 'Deny, Permit or Match' formats. 2. GeoIP database by MaxMind Inc. GeoLite2 Free version. 3. De-Duplication, Suppression, and Reputation...

CVE2_Jenkins_RCE

Jenkins CLI Websocket Hijacking - PoC A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability affecting Jenkins versions 2.217-2.441. This exploits targets the Jenkins CLI that can be used to remotely access and issue commands to a Jenkins control server...

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Docker Lab for CVE-2022-42889 You can either build the Docker image locally or pull the image from Docker Hub and run the container. Clone the repo git clone https://github.com/devenes/text4shell-cve-2022-42889.git Build the Docker image locally docker build...

CVE-2021-41773

CVE-2021-41773 A Zeek package which raises notices for Path Traversal/RCE in Apache HTTP Server 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013 References https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-41773 https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-42013...

cve-2022-22954

CVE-2022-22954 This package detects a subset of CVE-2022-22954 attempts and exploits, generates a notice, and also includes the exploit URI and the first 4KB of the data that was sent back to the attacker as a response. While detecting this attack is more straightforward from log analysis, this...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

ActiveMQ_CVE-2015-5254

ActiveMQ Deserialization CVE-2015-5254 Vulnerability Description: Security vulnerabilities exist in Apache ActiveMQ versions before 5.13.0. The issue stems from the program not restricting the classes that can be serialized in the broker. Remote attackers can exploit this by sending a specially...

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...