CVE-2025-32432-POC

Craft CMS CVE-2025-32432 Single-Target PoC Authorized testing only. This repository is intended for controlled lab environments, CTF platforms such as Hack The Box, internal validation, and defensive verification. Do not run this against systems you do not own or have explicit permission to test...

CVE-2025-28915

CVE-2025-28915 - WordPress ThemeEgg ToolKit Arbitrary File Upload Exploit 📌 Description An Unrestricted File Upload vulnerability in the ThemeEgg ToolKit plugin for WordPress versions ≤ 1.2.9 allows authenticated attackers to upload web shells to the server. This can lead to remote code execution...

CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

CVE-2022-22947

CVE-2022-22947 SpringCloudGatewayRCE Code By:Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read online Cybersecurity Law of the...

Tryhackme_Billing

TryhackmeBilling Billing CTF MachineCVE-2023-30258Remote Code Execution...

CVE-2016-3088

CVE-2016-3088 Statement A Python-based Exploit Script for CVE-2016-3088. This is my first script, so there may be something doesn't quite fit. But it seems go right when I tested. Discription This script can eliminate the need to capture packets during the penetration of CVE-2016-3088, so we can...

CVE-2025-55182-demo

CVE-2025-55182 — demo This repository provides a demonstration of the CVE-2025-55182 vulnerability, which allows for remote code execution RCE in vulnerable Next.js applications. References: CVE entry: https://vulners.com/cve/CVE-2025-55182 Related PoC: https://github.com/msanft/CVE-2025-55182...

CVE-2024-9264

CVE-2024-9264 - Grafana SQL Expressions DuckDB LFI/RCE PoC Python proof of concept for CVE-2024-9264, a Grafana SQL Expressions vulnerability that can allow authenticated local file inclusion and command execution when duckdb is available in the Grafana process PATH. For authorized testing and...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow Field| Value ---|--- CVE| CVE-2024-49113 Alias| LDAP Nightmare CVSS 3.1| 9.8 — CRITICAL CWE| CWE-122 — Heap-based Buffer Overflow Discovered| SafeBreach published PoC January 2025 Exploitation|...

cve-2025-55182-react2shell_reproduction

CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth Remote Code Execution in React Server Components Discovered by Chinese threat actors. Actively exploited by China-nexus APT groups. Overview Dubbed "React2Shell" , this vulnerability enables unauthenticated remote code execution via unsaf...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Resources https://vulners.com/cve/CVE-2016-2098 Usage To use this...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile EPMM, formerly known as MobileIron Core. This vulnerability impacts all supported versions – Version 11.4 releases 11.10, 11.9 and 11.8. Older...

PaperCut-CVE-2026-81578-82078

Professional security research tool for PaperCut NG/MF vulnerability assessment & authorized exploitation ╔══════════════════════════════════════════════════════════════════╗ ║ PAPERCUT SECURITY TOOL – POWER MODE ║ ║ CVE-2026-81578 · CVE-2026-82078 · v3.1.0 ║ ║ ⚡ powered by yora 1928 ⚡ ║...

CVE-2025-8110

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Educational Use Exploit This repository contains a Proof of Concept PoC script in Python to demonstrate and analyze the vulnerability registered as CVE-2025-8110 in the self-hosted Git service Gogs versions 0.13.3 and earlier. ⚠️ Disclaimer !WARNING...

CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. ...

CNTA-2019-0014xCVE-2019-2725

CNTA-2019-0014-CVE-2019-2725 Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited. Usage:python3 weblogicrce.py url command is echo? win or linux For detailed analysis, please visit: https://icematcha.win/?p=1174...

CVE-2021-44228-example

This is an example of exploiting CVE-2021-44228 A Log4J2 RCE vulnerability I'm not responsible for this code. PLEASE do not use maliciously CVE-2021-44228 : This vulnerability allows you to execute arbitrary code by logging a malicious message on the target machine. For example, you can use it in...

CVE-2022-24637

CVE-2022-24637 Unauthenticated RCE in Open Web Analytics version / newPassword YourIp YourPort It might be possible that you need to run it a few times to get a shell. The script can be improved...

cve-2023-33476

CVE-2023-33476 ReadyMedia MiniDLNA versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values tha...

CVE-2026-111855

A path traversal vulnerability (CWE-22) exists in the web management interface of Tektronix 3 Series MDO devices running firmware versions before 1.21.1 . The root cause is insufficient validation of user-supplied file paths, which allows remote attackers to read arbitrary files accessible to the...