CVE-2023-21608

CVE-2023-21608 Discord Server Este error era un uso después de liberación Use after Free que fue causado durante la operación resetForm al manejar referencias de memoria de objetos. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - Explotación de RCE - CVE-2023-21608 Aviso CVE-2023-21608 Demo...

CVE-2021-21985

CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. VMware has evaluated the severity of this issue to be in the Critical severity range with a...

CVE-2015-5377

CVE-2015-5377 Elasticsearch 1.5.2 is vulnerable to RCE through insecure java deserialization. The exploit attack the transport protocol on port 9300. The deserialization is based on Groovy MethodClosure chain to achive RCE...

CVE-2019-0752

https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-exploitation-of-a-write-what-where-in-internet-explorer PoC exploit for CVE-2019-0752 Targets Internet Explorer 11 32bit on Windows 10 x64 up to RS4, RS5? Uses special address values in adddition to some path magic to avoid using...

RCE_CVE-2024-7954

RCECVE-2024-7954 Description: The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. CRITICAL Exploit:...

CVE-2019-0708-POC

CVE-2019-0708-POC cve-2019-0708 poc . Run Test Work well for winxp sp3. Need test for win 7. Runtime: win10 x64 python3 root@kitploit: PS D:\workspace\python\sqlstruct\sqlstruct\sqlstruct python3 .\poc.py -t 192.168.1.112 -p 3389 CVE-2019-0708 Remote Detection tool by: closethe + Connecting to RD...

CVE-2021-27850_POC

CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Código fuente basado en: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Instalación Python 3.8 + pip install requests Windows 10 SO, Linux Ubuntu Uso python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80...

CVE-2025-24813

🚨 CVE-2025-24813 – Exploit de Apache Tomcat PUT JSP RCE Este repositorio contiene una prueba de concepto PoC completa para CVE-2025-24813 , una vulnerabilidad de Ejecución Remota de Código RCE en Apache Tomcat que utiliza el método HTTP PUT para desplegar un web shell malicioso JSP. 🔥 Este exploi...

Security Bulletin: This Power System update is being released to address CVE-2026-18870

Summary PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. Vulnerability Details CVEID:CVE-2026-18870 DESCRIPTION: PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. CWE:CWE-125...

CVE-2021-26084_Confluence

CVE-2021-26084Confluence Exploit CVE 2021 26084 Confluence dock0d1@arch$ python rce.py...

CVE-2020-17518

Apache Flink目录遍历漏洞，可通过REST API读/写远程文件 Vulnerabilidad de path traversal en Apache Flink que permite lectura/escritura remota de archivos a través de la API REST 漏洞编号： ID de vulnerabilidad: CVE-2020-17518 漏洞描述： Descripción de la vulnerabilidad: CVE-2020-17518：通过REST API写入远程文件 CVE-2020-17518:...

CVE-2026-96514

A SQL injection vulnerability exists in the Login Handler component of Neethuharii CafeManagement . Specifically, an unknown function within the CafePortalLogin.php file fails to properly sanitize the uname argument, allowing for remote execution. The exploit is publicly available. Due to the pro...

CVE-2026-96514 Neethuharii CafeManagement Login CafePortalLogin.php sql injection

A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipulation of the argument uname causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

CVE-2016-2098

CVE-2016-2098 Action Pack en Ruby on Rails anterior a 3.2.22.2, 4.x anterior a 4.1.14.2, y 4.2.x anterior a 4.2.5.2 permite a atacantes remotos ejecutar código Ruby arbitrario aprovechando el uso sin restricciones del método render por parte de una aplicación. https://vulners.com/cve/CVE-2016-209...

rollback_car_attack_proverif

Rollback attack formal verif ProVerif proof of concept of the Rollback attack on car keyfob CVE-2022-37418, CVE-2022-36945 and CVE-2022-37305, presented in1 Disclaimer I have no connection with the authors of 1. I am grateful to them for making their paper open access. ProVerif installation...

CVE-2026-96804

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOWALLOWPICKLEDESERIALIZATION=False security control entirely in loadmodel, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...

CVE-2021-42013-Apache-RCE-Poc-Exp

Vulnerability Name Apache Remote Code Execution CVE-2021-42013 Vulnerability Description Apache HTTP Server is an open-source web server from the Apache Software Foundation. It is fast, reliable, and extensible via a simple API. It was discovered that the fix for CVE-2021-41773 in Apache HTTP...

CVE-2023-46818-Exploit

CVE-2023-46818-Exploit This is my own exploit for CVE-2023-46818 happy hacking! This exploit automates the attack described in CVE-2023-46818 by taking advantage of a PHP code injection vulnerability in ISPConfig version 3.2.11 and earlier. It logs into the ISPConfig panel using valid credentials...