329545 matches found
cve-2017-9822
CVE-2017-9822 Key Information Setup Environment Setup Debug Analysis Debug XmlSerializer Attack Gadget ObjectDataProvider ResourceDictionary From XML Insecure Deserialization to RCE CVE-2017-9822 DNN also known as DotNetNuke before version 9.1.1 has the ability to execute remote code via cookies,...
SSE4-CVE-2022-22965
Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 Getting Started 1. Run docker compose up --build to build and start the vulnerable application. 2. Run curl -H "Accept: text/html;"...
SpringCloudFunction-Research
SpringCloudFunction-Research CVE-2022-22963 research Environment vulfocus/spring-cloud-function-rce:latest Cause Parsing issue of the spring.cloud.function.routing-expression parameter in the Request Header, leading to injection Payload attacks. Reference...
React2Shell-Exploit-CVE-2025-55182
💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗ █████╗ ██████╗████████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔══██╗██╔════╝╚══██╔══╝╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝█████╗ ███████║██║ ██║ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔══██╗██╔══╝ ██╔══██║██║ ██║...
CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch
CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki 0 Table of Contents 1. Summary 2. Vulnerability Details 3. Affected Versions 4. Proof-of-Concept 4.1 Building the payload 4.2 Manual exploitation 4.3 Automated python exploit 5. Mitigation 6. Credits & References 1 Summary CVE:...
CVE-2025-31324_PoC
CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...
CVE-2019-0708-Windows
CVE-2019-0708-Windows This article will share the Windows Remote Desktop Service vulnerability CVE-2019-0708, and provide a detailed explanation of the vulnerability and defensive measures. As a cybersecurity beginner, the author shares some self-study basic tutorials, mainly online notes about...
Better-CVE-2022-29464
Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...
cve-2020-11060-poc
CVE-2020-11060 This script is a Python 3.x based exploit for CVE-2020-11060 in GLPI versions 0.85-9.4.5. Original implementation: 0xdreadnaught Python3 refactoring: n3rada The original PoC in ExploitDB is now deprecated since it used Python 2.x. The new version has been submitted, and a link will...
CyberPanel-RCE
CyberPanel-RCE Exploit for CyberPanel RCE found on v2.3.6 More information availabe on my blog: https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...
CVE-2024-29671-POC
NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...
Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit
Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...
CVE-2023-39361
CVE-2023-39361 Unauthenticated SQL injection in Cacti v1.2.24 Overview Cacti is an open-source operational monitoring tool written in PHP, MySQL/MariaDB, which provides a friendly interface. The vulnerability was found in 2023 which affected all versions before 1.2.24. This security flaws lies in...
CVE-2025-10585-The-Chrome-V8-Zero-Day
CVE-2025-10585: The Chrome V8 Zero-Day You Need to Patch Today ⚔️🛡️ Google has released an out-of-band patch this week for CVE-2025-10585 , a serious type-confusion vulnerability in Chrome’s V8 JavaScript / WebAssembly engine. The bug is not theoretical — Google’s Threat Analysis Group confirmed...
HTB_Nibbles
HTBNibbles In this repository you will find the technical report of Nibbles, the exploit pwned.py to abuse the CVE-2015-6967 and an autopwn tool autopwn.py in case you want to resolve the machine in HackTheBox. Pwned.py tool: This file will help you to exploit CVE-2015-6967. If you want to run th...
mailenable-cve-2022-36934
MailEnable CVE-2022-36934 Exploit Module Metasploit module for MailEnable's authentication bypass vulnerability CVE-2022-36934, leading to remote code execution. 📌 Features Exploits MailEnable's improper input sanitization in SMTP/POP3 Supports both x86 and x64 Windows targets No user interaction...
L4J-Vuln-Patch
NOTICE This tool is no longer necessary mojang has released its own patch which should cover everyone who is affected https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition WARNING THIS EXPLOIT EFFECTS BOTH CLIENTS AND SERVERS There is currently a exploit...
SMB-Protocol-Vulnerability_CVE-2017-0144
LAB: ATTACKING THE WINDOWS OPERATING SYSTEM VIA THE SMB PROTOCOL VULNERABILITY. 1. DESCRIPTION 2. GENERAL INTRODUCTION 3. PREPARATION 4. PERFORMING THE ATTACK 5. HOW TO PREVENT 1. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB...
CVE-2021-27850_POC
CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...