vBulletin_Routestring-RCE

CVE-2019-16759vBulletinRoutestring-RCE-PoC A vulnerability has been discovered in vBulletin which could allow for remote code execution when a malicious POST request is sent to the vulnerable application. The vulnerability is due to an input validation error while parsing a HTTP request in the...

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Remote Code Execution RCE Exploit Description This script exploits a Remote Code Execution RCE vulnerability in Pluck CMS v4.7.18. The vulnerability allows a malicious user to upload a malicious PHP file to the server and execute it, gaining remote command...

cve-2021-22205-GitLab-13.10.2---Remote-Code-Execution-RCE-Unauthenticated-

This repository does not have a README...

CVE-2024-9593-Exploit

CVE-2024-9593-Exploit The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attacker...

CVE-2025-13486

CVE-2025-13486 exploit ACF Extended WordPress Plugin — Remote Code Execution & Privilege Escalation Exploit for the CVE-2025-13486 discovered by Marcin Dudek dudekmar ⚠️ Disclaimer This repository is provided for research and defensive security purposes only. The author assumes no responsibility...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit Username Map Script This repository contains a Python script designed to automate the exploitation of the CVE-2007-2447 vulnerability on Samba servers versions 3.0.20 to 3.0.25rc3. This tool has been developed for strictly educational purposes and authorized penetratio...

CVE-2025-5548-POC

CVE-2025-5548-POC Vulnerability Description CVE-2025-5548 is a stack buffer overflow vulnerability identified in FreeFloat FTP Server, a legacy FTP service for Windows systems. The flaw resides in the NOOP command handler, which does not validate input size before copying it into a fixed-size...

CVE-2024-25153

Exploit for CVE-2024-25153 Table of Contents Click to expand 1. Introduction 2. Installation 3. Usage 4. Contributing 5. License Introduction Welcome to the Exploit for CVE-2024-25153! This project is a solution to exploit the CVE-2024-25153 vulnerability and execute code remotely in Fortra...

cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770: Langflow execglobals Remote Code Execution CVSS 9.8 Critical | ZDI-CAN-27325 | CWE-829: Inclusion of Functionality from Untrusted Control Sphere Overview CVE-2026-0770 is a critical unauthenticated remote code execution vulnerability in Langflow, a low-code application framework fo...

CVE-2025-48384-main

PoC for CVE-2025-48384 This is a POC. Don't download it in an unsafe environment. It will allow the hacker to execute remote code on your machine See CVE-2025-48384 To run: git clone --recurse-submodules [email protected]:zr0n/CVE-2025-48384-main.git The executed payload is here...

CVE-2025-59287

CVE-2025-59287 WSUS Vulnerability Reproduction CVE-2025-59287 — Injecting WolfShell Wolverine Forward Memory Shell Overview CVE-2025-59287 exploits a logic flaw in WSUS-related components to inject a WolfShell memory shell into the target server. When an administrator opens the WSUS console...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2017-12149

CVE-2017-12149 Coded by 1337g Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

CVE-2021-43936

CVE-2021-43936 CVE-2021-43936 is a critical vulnerability CVSS3 10.0 leading to Remote Code Execution RCE in WebHMI Firmware. This vulnerability works on versions 4.0 and the newest ones. Tested only on 4.0.7475. Vulnerability is used by script in the following steps: 1. Logs into the application...

CVE-2025-49132-PoC

CVE-2025-49132 PoC by Pwndalf Overview This repository contains a Proof of Concept PoC for CVE-2025-49132, a Remote Code Execution RCE vulnerability affecting Pterodactyl Panel -l -p...

CVE-2026-82222

CVE-2026-82222 — GiveWP Author: Rx019 CVSS: 10.0 Critical Type: Unauthenticated PHP Object Injection → Remote Code Execution Plugin: GiveWP give — Donation Plugin and Fundraising Platform Affected: Patched: 4.16.8 Description GiveWP stores a donor's lastname in the PHP session without sanitizatio...

CVE-2023-43208

Mirth Connect RCE - CVE-2023-43208 Description PoC for Mirth Connect Remote Code Execution RCE Affects Mirth Connect Example Start listener nc -lvnp 4444 Run exploit ./exploit https://target.com 10.10.10.10 4444 References https://nvd.nist.gov/vuln/detail/CVE-2023-43208...

MAL-012

MAL-012: Reflected Cross-Site Scripting in Admin Console leading to Remote Code Execution in Payara Server A reflected Cross Site Scripting XSS attack was found in the Payara Admin Console. By convincing an admin user to access the malicious URL and click the “Choose File” button, an attacker can...

CVE-2022-47966

CVE-2022-47966 ManageEngine RCE 2022 This repo is part of the hgrab-framework Installation Install the app on the server user@domain: git clone https://github.com/sh4den/CVE-2022-47966.git user@domain: cd ./CVE-2022-47966/ user@domain: python3 main.py The list file must contain the targets server...

Unauthenticated-Remote-Code-Execution-RCE---Poultry-Farm-Management-System-v1.0

Exploit Title: Unauthenticated Remote Code Execution RCE - Poultry Farm Management System v1.0 Date: 24-06-2024 CVE: CVE-2024-40110 EDB-ID: 52053 Exploit Author: Jerry Thomas w3bn00b3r Vendor Homepage: https://www.sourcecodester.com/php/15230/poultry-farm-management-system-free-download.html...