FilelessPELoader

FilelessPELoader Loading Remote AES Encrypted PE in memory , Decrypted it and run it Usage : References : https://github.com/aplyc1a/PEMemoryLoader?fbclid=IwAR2-VAQo8pJU-tdbSENjhDBdDGi5tyzrnW1S3D9BPAYR6C6-RK4hsEDjDGk Requirements 1. hashlib 2. pycryptodome 3. pycryptodomex...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 Proof of concept Exploit RCE in Apache HugeGraph Server Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph Server. Usage 🛠 Exploit multiple targets ☣️ python3 CVE-2024-27348.py -f targets.txt -c "command to execute" Exploit single...

cve-2019-14540-exploit

CVE-2019-14540 Exploit http://www.leadroyal.cn/?p=939 Environment limitation: This demo uses the jndi ldap exploitation method, so a low version less than 8u191 of the jdk is required. 1. Use marshalsec to create an ldap service on local port 1389, pointing to the http service on local port 8000...

CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE | ---|--- Plugin| Divi Ajax Filter Divi Engine, premium — bukan di wordpress.org SVN Affected| semua versi = 5.1.2 lab memakai 3.1.8.4 dari mirror Patched| 5.1.3 11/08/2026 Tipe| CWE-98 — PHP Local File Inclusion, unauthenticated CVSS| 9.8 Critical...

NTDLLReflection

NTDLLReflection Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll , and trigger exported APIs from the export table...

CVE-2022-36446-Webmin-Software-Package-Updates-RCE

A Python script to exploit CVE-2022-36446 Software Package Updates RCE Authenticated on Webmin 1.997. Features Supports HTTP and HTTPS even with self-signed certificates with --insecure. Single command execution with --command option. Interactive console with --interactive option. Usage $...

garble

garble go install mvdan.cc/garble@latest or @master Obfuscate Go code by wrapping the Go toolchain. Requires Go 1.27 or later. garble build build flags packages The tool also supports garble test to run tests with obfuscated code, garble run to obfuscate and execute simple programs, garble revers...

CVE-2020-13957

Apache Solr RCE CVE-2020-13957 Docker Demo Mac Demo NVD CVE-2020-13957 Description NVD CVE-2020-13957 Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous which could be used for remote code execution to be configured in a ConfigSet...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: go build cve-2026-19900-PoC.go ./cve-2026-19900-PoC -t...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 Bypass de Autenticación RCE en iControl REST de F5 BIG-IP. POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server,...

CVE-2022-33980

CVE-2022-33980 CVE Apache Commons RCE can use url,dns,script key-words to connect any server...

CVE-2022-26134

CVE-2022-26134 1. Primero ejecute los scripts de Shodan para obtener todas las IPs python3 shodanscript.py -API yourapi -L limit -D "http.favicon.hash:-305179312 200" log.txt ej: python3 shodanscript.py -API xxxxxxx -L 10 -D "http.favicon.hash:-305179312 200" log.txt 2. Para todas las IPs válidas...

CVE-2020-15227

CVE-2020-15227 ¡DESCARGO DE RESPONSABILIDAD! No asumo ninguna responsabilidad por su uso en un entorno real, así que por favor NO lo hagas. Esta cosita es solo para demostrar y probar cosas para los administradores de sistemas. Hice este exploit según la publicación de un CVE de David Grudl el...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 dork en shodan https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 Curl poc curl -v...

FreeRDP

FreeRDP: A Remote Desktop Protocol Implementation FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Enjoy the freedom of using your software wherever you want, the way you want it, in a world where interoperability can finally liberate your...

CVE-2024-23897

uso python3 exp.py...

CVE-2021-26084_Confluence

CVE-2021-26084Confluence Exploit CVE 2021 26084 Confluence dock0d1@arch$ python rce.py...

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Arbitrary File Upload -purple 📌 Description The CSV Mass Importer plugin ≤ 1.2 for WordPress contains an Admin+ Arbitrary File Upload vulnerability. Due to improper validation of uploaded files, high-privilege users such as admin can upload...

CVE-2022-22963-POC

CVE-2022-22963 Exploit Descripción En Spring Cloud Function versiones 3.1.6, 3.2.2 y versiones anteriores no soportadas, al usar la funcionalidad de enrutamiento es posible que un usuario proporcione un SpEL especialmente manipulado como expresión de enrutamiento que puede resultar en ejecución...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...