332991 matches found
CVE-2025-55182
CVE-2025-55182 – React Server Components Remote Code Execution Create By : Virendra Kumar Company : Cyber Leelawat Website : www.cyberleelawat.in Overview CVE-2025-55182 is a critical Remote Code Execution RCE vulnerability affecting the React Server Components RSC implementation within multiple...
CVE-2026-24061
CVE-2026-24061 CVE-2026-24061 Telnet RCE Exploit For Linux MacOS Windows CVE-2026-24061 Telnet RCE 1.9.3 = GNU Inetutils = 2.7 Usage: go-telnet-exploit -p Check Exploit...
CVE-2025-24797
CVE-2025-24797 CVE-2025-24797 Detail - NVD Summary A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not...
CVE-2024-4577
PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...
CVE-2020-9484
CVE-2020-9484 Reference Authored by redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + I just analyzed 1-day exploit. then remodeled. Description Compared to the before PoC, it has the following advantages. + Environment Script for Ubuntu 18.04. + You can ed...
CVE-2025-8889
Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arbitrary File Upload to RCE Date: 2025-07-23 Exploit Author: Muhammed Çelik Vendor Homepage: https://wordpress.com/plugins/compress-then-upload Software Link: https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip...
halo-2.25.4-CVE-2026-67919
Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...
CVE-2026-0740-mass
CVE-2026-0740 — Mass-Target Exploit Engine Author: 0xNuts Contributor: Cursor Repository: https://github.com/ExDev994/CVE-2026-0740-mass PoC for CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 — Unauthenticated Arbitrary File Upload which can lead to RCE. Original vulnerability discovered by Sél...
react2shell-exploit
CVE-2025-55182 – React2Shell Remote Code Execution in Next.js ⚠️ Disclaimer : This documentation is provided for educational and security research purposes only. Any unauthorized use of these techniques against systems you do not own or have explicit permission to test is illegal. 📋 Table of...
CVE-2024-54262
CVE-2024-54262 Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce Overview This script exploits a vulnerability in the "Import Export for WooCommerce" WordPress plugin. The vulnerability allows unauthorized users to upload arbitrary files, leading to potential remote...
PoC-CVE-2026-1357
PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...
CVE-2019-9978-Social-Warfare-WordPress-RCE
🚀 CVE-2019-9978 – Social Warfare WordPress Plugin RCE ⚠️ DISCLAIMER: This repository is for educational and authorized security testing only. Use only on systems you own or have explicit written permission to test. Unauthorized access is illegal. 📋 Overview Property| Value ---|--- CVE ID|...
Exploit-CVE-2025-24801
CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...
CVE-2021-41773-Apache-RCE
CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...
cgi-bin-shellshock
How to use Clone the repository or just copy-paste the one you prefer sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL required. If just URL given, it will RCE, else it...
CVE-2026-42945
RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...
cve-2010-4221-lab
CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch to RCE A fully reproducible lab and a hand-written, raw-socket exploit for CVE-2010-4221 — the pre-authentication stack buffer overflow in ProFTPD's prnetiotelnetgets — built as a learning exercise in vulnerability research and exploit...
CVE-2024-4309-Analysis
🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE ⚠️ EDUCATIONAL PURPOSES ONLY — Use on real systems is prohibited. 📋 Project Overview / Project Overview Prepared as part of the BGT-Pentest-LAB cybersecurity final project. Xiaomi HyperOS System Updater...
-CVE-2024-45352
🚨 CVE-2024-45352 – Xiaomi Smarthome Remote Code Execution RCE 📌 Summary A critical vulnerability CVE-2024-45352 was discovered in the Xiaomi Smarthome application, allowing unauthenticated remote code execution RCE via improper input handling in the internal API parser. This vulnerability can be...