1173524 matches found
CVE-2022-30136
CVE-2022-30136 Windows Network File System Remote exploit PoC author: Ricardo Narvaja For demonstration purposes only. Complete exploit works on vulnerable Windows Server systems. Checkout the writeup Analysis of CVE-2022-30136 āWindows Network File System Vulnerabilityā. Usage Analysis of...
CVE-2026-41472-POC
CyberPanel XSS to RCE CVE-2026-41472 One-click Remote Code Execution in CyberPanel v2.4.3 via unauthenticated API endpoints. Overview This exploit chains multiple vulnerabilities in CyberPanel's AI Scanner feature: 1. Unauthenticated Database Injection /api/ai-scanner/callback accepts arbitrary...
azazel
Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...
CVE-2024-7120
Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...
CVE-2024-20696
libarchive-harness-win - CVE-2024-20696 Blog post: https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/ A simple test harness for CVE-2024-20696 1. Download a version of archiveint.dll that you want to test 2. Update the path here 3. Update the file pa...
R2C-CVE-2025-55182-66478
š„React2Shell Toolkit-CVE-2025-55182 & CVE-2025-66478 šØ Critical RCE in React Server Components & Next.js šØ Professional Red Team Toolkit for CVE-2025-55182 Detection & Exploitation š Features ā¢ ā” Quick Start ā¢ š Documentation ā¢ š¤ Connect šÆ About CVE-2025-55182 & CVE-2025-66478 š What is...
CVE-2022-23940
CVE-2022-23940 PoC for CVE-2022-23940 aka SCRMBT-187 - Authenticated Remote Code Execution through Scheduled Reports in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2022-23940 Example usage: Spawning a PHP Rev...
CVE-2021-44228
Log4Shell POC CVE-2021-44228 The scope of this repository is to provide all the components needed to exploit CVE-2021-44228, nicknamed Log4Shell, and to show how to exploit it. The ingredients needed to exploit this vulnerability are the following: 1. An LDAP Server that will redirect the...
CVE-2026-57827
CVE-2026-57827 ā RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass ā Direct Write Task ā /downloads/shell.php ā RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...
CVE-2026-41089
CVE-2026-41089 āāāāāāāāāā āāāāāāāāāāā āāā āāā āāā āāāāāāā āāāāāāā āāāāāāāāāāā āāāāāāāāāāā āāā āāāāāāāāāāāāāāāāāāāāāāāāā āāā āāā āāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāā āāāā āāāāāāāāāā āāāāāāāā āāāāāāāāāāāāāāāāāāāāā āāāāāāāā āāāāāāā āāāāāāāā āāā āāā āāāāāāāāāāāāāāāāāāāāā āāāāāāā āāāāā āāāāāāā...
CVE-2022-22965-PoC
CVE-2022-22965 Spring4Shell Proof of Concept Test the RCE Remote Code Execution in Spring Coreā Build the image BuildKit based build is required so you need to enable it. Easiest way is to set the DOCKERBUILDKIT=1 environment variable when invoking the docker build command, such as: $...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...
CVE-2018-16119
CVE-2018-16119: Authenticated Remote Code Execution in TP-Link WR1043ND Overview CVE-2018-16119 is a critical authenticated remote code execution vulnerability affecting TP-Link TL-WR1043ND routers. This vulnerability allows authenticated attackers to execute arbitrary commands on the target devi...
teletunnel
TeleTunnel v2 A Telegram-based remote access tool for Windows. Disclaimer: For authorized use on systems you own only ! Please š Features Remote administration via a Telegram bot. Secure control only accepts commands from your specified Telegram user ID. The bot have these features: į“į“Źį“į“į“É“É“į“Ź į“ 2...
React2Shell
š React2Shell - Next.js RSC Pollution RCE Toolkit This Python toolkit exploits Next.js React Server Components RSC prototype pollution + React.lazy-1 gadget chain for full RCE access, including interactive god shell, file upload PHP webshell dropper, and exfiltration via ?out=. Image Preview š§¾...
CVE-2025-55182
React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...
CVE-2022-22909
CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...
vbulletin5-rce
vbulletin5 rce vulnerability detection tool 0x00 Overview In September 2019, vbulletin5 5.0.0-5.5.4 disclosed an RCE vulnerability CVE-2019-16759. Using the file ajax/render/widgetphp and the POST parameter widgetConfigcode, remote code execution can be directly achieved. On August 11, 2020, a...
CVE-2025-9074
CVE-2025-9074 - Docker Remote API Lab PoC ā ļø Disclaimer: This repository is for educational and research purposes only. Do not use this code outside of a controlled environment that you own. The author is not responsible for misuse. Overview This repository contains a proof-of-concept PoC for...
CVE-2022-26134
CVE-2022-26134 - Confluence OGNL injection vulnerability Script Usage Install Python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scanning python3 CVE-2022-26134check.py -f url.txt -c whoami Affected Versions Confluence...