CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL Injection → PostgreSQL-superuser RCE SQL injection in the myInAppChannels:list action of NocoBase's @nocobase/plugin-notification-in-app-message ≤ 2.0.60. The filterlatestMsgReceiveTimestamp$lt request parameter is interpolated directly into a raw Sequelize.literal S...

log4shell

Log4Shell CVE-2021-44228 — Research Report A self-contained technical report on Log4Shell , the critical Remote Code Execution vulnerability in Apache Log4j 2 disclosed in December 2021. Covers root cause analysis, the full attack chain, detection/mitigation guidance, and an end-to-end exploit...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2026-13714 — WPL Real Estate Unauthenticated RCE Realtyna Organic IDX plugin + WPL Real Estate for WordPress 5.3.0 Unauthenticated arbitrary file upload via...

CVE-2022-25226

ThinVNC 1.0b1 - Authentication Bypass to Remote Code Execution CVE-2022-25226 Author: krill-x7 Reference: https://fluidattacks.com/advisories/sinatra Overview ThinVNC 1.0b1 contains an authentication bypass vulnerability CVE-2022-25226 allowing remote attackers to interact with the backend...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

CVE-2025-53770-Exploit

CVE-2025-53770-Exploit First, get the VIEWSTATEGENERATOR, VALIDATIONKEY, VALIDATIONALG value from the target SharePoint page: curl -s https://target.com/layouts/15/start.aspx | grep -oP 'VIEWSTATEGENERATOR" value="\K^"+' curl https://target.com/layouts/15/spinstall0.aspx Then, create a PowerShell...

wonderplugin

Wonderplugin For RCE DONT USE THIS FAKE PLUGIN ON YOUR PRODUCTION WEB SERVER! This repository purposed for test a vulnerability on wonderCMS, this fake plugin contain backdoor web shell, you can find it on evil.php file. Related Article WonderCMS 3.1.3 - Authenticated RCE & Blind SSRF Vulnerabili...

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ Overview CVE-2026-16723 is a Remote Code Execution RCE vulnerability in Fastjson 1.x 1.2.68 – 1.2.83. When Fastjson parses attacker-controlled JSON, a crafted @type value is turned into a class-resource lookup inside...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...

webcgi-exploits

Web CGI Exploits Here's several exploits related to different web CGIs. I wrote those exploits in last few years. How it works Web app are basicly those layers: 1. applications 2. web frameworks 3. script language engines 4. web containersservers 5. web front proxynginx etc. 4 and 5 could be the...

Pluck-CMS-Pluck-4.7.16-Theme-Upload-Remote-Code-Execution-Authenticated--POC

Pluck-CMS-Pluck-4.7.16-Theme-Upload-Remote-Code-Execution-Authenticated-POC Exploit Author: Ashish Koli Shikari Vendor Homepage: https://github.com/pluck-cms/pluck Version: 4.7.16 CVE: CVE-2022-26965 About this: This script uploads shell.tar to the PluckCMS. An application will untar the package...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated- Remote Code Execution RCE Exploit Author: Ashish Koli Shikari Vendor Homepage: https://thedigitalcraft.com/ Software Link: https://github.com/thedigicraft/Atom.CMS Version: 2.0 CVE: CVE-2022-25487 About this: This script uploads...

textpattern-exploit-rce

Textpattern = 4.8.3 Remote Code Execution Authenticated Textpattern until version 4.8.3 allows authenticated users to upload any PHP file. This script automates the process and allows to delete the uploaded file. Usage python3 exploit.py -t TARGET -u USER -p PASSWORD -c COMMAND -f FILENAME -d -t:...

hekate

Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...

dompdf-rce

RCE exploit for dompdf This repository contains a vulnerable demo application using dompdf 1.2.0 and an exploit that achieves remote code execution via a ttf+php polyglot file. For more details, please visit https://positive.security/blog/dompdf-rce Instructions 1. Run the demo application $ cd...

Umbraco-RCE

Umbraco RCE exploit / PoC Umbraco CMS 7.12.4 - Authenticated Remote Code Execution EDB-49488 PacketStorm WLB-2020080012 Usage $ python exploit.py -h usage: exploit.py -h -u USER -p PASS -i URL -c CMD -a ARGS Umbraco authenticated RCE optional arguments: -h, --help show this help message and exit ...

OpenEMR-RCE

OpenEMR RCE exploit / PoC OpenEMR --shell --user --password --debug exploit.rb semi-auto --root-url --user --password --payload --lhost --lport --debug exploit.rb auto --root-url --user --password --lhost --lport --debug exploit.rb -H | --help Options: -r , --root-url Root URL base path including...

Atmail-exploit-toolchain

AtMail Email Server Appliance 6.4 - Exploit toolchain XSS CSRF RCE PacketStorm WLB-2020080010 Disclaimer: this exploit toolchain was inspired by EDB-ID 20009. Goal The goal of this exploit toolchain is to replace EDB-ID 20009. Pros of this toolchain over EDB-ID 20009 exploit: Simple to use Reusab...

CVE-2026-111094

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible...

agent_tesla_panel_rce

agentteslapanelrce This module exploit the command injection vulnerability in control center of the agent Tesla. Setup Resources for testing are available here: https://github.com/mekhalleh/agentteslapanelrce/tree/master/resources Windows For WebPanel1.7z unauthenticated RCE, I used WAMP server...