1178027 matches found
cve-2025-62726-poc
CVE-2025-62726 POC - n8n Git Node RCE Educational Purpose This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025 Vulnerability Overview CVE ID: CVE-2025-62726...
CVE-2017-0199
Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...
Spring-Web-5xx-Mitigated-version
Spring-Web-5xx-Mitigated-version Overview This mitigated version of Spring Web 5.x.x is specifically crafted to address critical vulnerabilities detected by multiple vendors using Sonatype and Mend. The vulnerabilities, identified under the CVE-2016-1000027 advisory, pose a risk of remote code...
text4shell-exploit
text4shell-exploit A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions Example python3 text4shell.py 127.0.0.1 192.168.1.2 4444 Make sure to set up a lsitener on your attacking...
CVE-2019-1759-csrf-js-rce
CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce Watch the video...
cve-2025-55182-analysis
CVE-2025-55182 — React Server Components RCE Analysis Web application vulnerability analysis · M2 Cybersecurity · 2025 Author: Niane Mohamed · LinkedIn End-to-end exploitation chain of a critical CVSS 10.0 insecure deserialization vulnerability in React Server Components, from reconnaissance to...
CVE-2024-32399
CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...
CVE-2018-15473
CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Edited version of the original exploit: https://www.exploit-db.com/exploits/45233 Converted to Python3 Added username wordlist option How To Run Install the requirements: foo@bar:$ pip3 install -r requirements.txt For single username...
CVE-2024-4577
Just for researching Poc For Default XAMPP curl -v -d "" http://127.0.0.1/php-cgi/php-cgi.exe/?%add+allowurlinclude%3Don+-d+autoprependfile%3Dphp%3A//input+-d+cgi.forceredirect%3D0...
Exploit-CVE-2025-24801
CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...
Optimum
Optimum Optimum – Hack The Box Writeup Overview In this machine, the objective is to gain initial access to a Windows host by exploiting a vulnerable web service and then escalate privileges to obtain the administrator flag. The attack path involved: Service enumeration Exploitation of Rejetto HT...
CVE-2022-30190
CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will...
CVE-2023-41425
RCE for WonderCMS versions v3.2.0 to v3.4.2 WonderCMS versions v3.2.0 to v3.4.2 with XSS vulnerability allow a malicious actor to achieve RCE by uploading a component to the installModule CVE-2023-41425 No need to know the password. Features: Automated exploitation of CVE-2023-41425 Ease of...
CVE-2018-11736
CVE-2018-11736 PHP RCE Exploit Pluck CMS Disclaimer ⚠️: This exploit was developed in Rust primarily as an introductory programming learning exercise. Please excuse any lack of technical rigor or non-idiomatic code patterns. Also, this is not my discovery; I relied on official reports to write thi...
CVE-2021-41773m
CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...
test_iconv
Probando CVE-2024-2961 V1 - Bajo Análisis Este repositorio contiene un programa en C para probar CVE-2024-2961, que involucra una vulnerabilidad de desbordamiento de búfer en la función iconv de la Biblioteca C de GNU glibc. Debido a la estructura del montón de PHP, este desbordamiento puede ser...
Letta-CVE-2025-51482-RCE
Letta-CVE-2025-51482-RCE Vulnerability Cause Analysis 1. Lack of Code Security Inspection Problem: The system does not perform any security inspection on user-provided source code. Evidence: generateexecutionscript method directly inserts user code into the execution script: code += "\n" +...
CVE-2023-47459
CVE-2023-47459 Description A vulnerability was discovered in Knovos Discovery v.22.67.0 that allows a remote attacker to access confidential information using the components: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...
CVE-2024-21762-Checker
CVE-2024-21762-Checker This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses. For more information, see this Bishop...