CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar README project base on https://github.com/Y4er/CVE-2020-2555 and weblogiccmd test on 12.2.1.4.0 and jdk 1.8.0221 Reference 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2...

CVE-2023-33669

CVE-2023-33669 Exploit Exploit for a stack overflow vulnerability in the Tenda AC8 router, specifically targeting firmware version USAC8V4.0siV16.03.34.06. Official product page. Emulation You can put 'prepare.sh' file in root directory of firmware and execute it. Also for RCE you have to setup...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs Source IPs attempting attacks using Apache Log4j RCE, including a large number of Tor nodes, see Attack-IP.md IOCs for malware, botnets, etc. propagated via the Log4j vulnerability, see IOC-C2.md Snort detection rules, see Snort.md Suricata rules, see...

DVS

DCOM Vulnerability Scanner AKA Devious swiss army knife - Lateral movement using DCOM Objects Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with...

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Remote Code Execution by IP restriction bypass and using default admin AIP token Full walkthrough https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

cve-2025-55182-test-lab-windows

CVE-2025-55182 React2Shell Test ⚠️ Warning : Contains a working remote code execution RCE vulnerability. 📋 Table of Contents Overview Vulnerability Information Quick Start Actual Attack Demonstration Test Environment WAF Defense Rules File Structure References Legal Notice Overview Container test...

CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

CVE-2020-35575-password-disclosure-issue-in-the-web-interface A password-disclosure issue in the web interface on certain TP-Link devices allows a remote malicious user to get full administrative access to the web panel. This affects WA901ND devices prior to 3.16.9201211 beta, and Archer C5, Arch...

CVE-2026-41089

CVE-2026-41089 — Windows Netlogon CLDAP Stack Buffer Overflow RCE Exploit CVE-ID: CVE-2026-41089 CVSS: 9.8 Critical CWE: CWE-121 Stack-based Buffer Overflow Attack Vector: UDP/389 CLDAP SearchRequest Impact: Remote Code Execution RCE / Denial of Service DoS Affected Versions: Windows Server 2012 ...

React2Shell_cve-2025-55182

React Server Components RCE - CVE-2025-55182 Hello! I hope you're having a great day! 😊✨ What's This About? React Server Components versions 19.0.0 , 19.1.0 , 19.1.1 , and 19.2.0 have a serious security problem. The packages react-server-dom-parcel, react-server-dom-turbopack, and...

react-cve-2025-55182

fix-react2shell A CLI tool to detect and fix the critical CVE-2025-55182 React2Shell vulnerability in React Server Components and Next.js applications. The Vulnerability CVE-2025-55182 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability affecting: React Server DOM packages...

SMShell

SMShell PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 bu...

CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins

CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins CVE-2019-1003000 and CVE-2018-1999002 Pre-Auth RCE Jenkins...

CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...

cve-2022-28944

CVE-2022-28944 EMCO Software Multiple Products Unauthenticated Update Remote Code Execution Vulnerability. Usage: python3 cve-2022-28944poc.py Details in the report at gerr.re. Steps to reproduce 1. Install an affected product of EMCO Software; 2. Set spoof storage.emcosoftware.com to our attacke...

CVE-2026-97188

The String locator WordPress plugin (versions before 2.6.8 ) is vulnerable to unauthenticated PHP Object Injection via its database editor. The flaw exists because the plugin fails to restrict allowed classes during the deserialization of database row content. An unauthenticated attacker can stor...

CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...

CVE-2025-24893

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC Vulnerability Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the...

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

tinyshell

tinyshell Small PHP shell, Controlled by Python Client , connecting over protocol method features connect with direct session with no need for reverse connection . support password protection . can be binded to any file with no damage . using GET/POST request with error handling . usage the proje...

CVE-2024-3094-info

CVE-2024-3094-info CVE-2024-3094 PoC Exploration https://github.com/amlweems/xzbot https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin response https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...