1178018 matches found
CVE-2022-1388
CVE-2022-1388 F5 BIG-IP Unauthenticated RCE Vulnerability F5 BIG-IP iControl REST่บซไปฝ้ช่ฏ็ป่ฟRCEๆผๆด fofa keywords: title="BIG-IP- Redirect" usage attack $ python3 cve-2022-1388.py -t https://203.xxx.xxx.xxx + https://203.xxx.xxx.xxx is vulnerable input your command:...
Zoom-dll-hijacking
Zoom-dll-hijacking A dll hijacking vulnerability in zoom meeting 5.1.3 Affected Windows version Windows 7 or less Windows Server 2008 Any other windows system that doesn't have SHCore.dll present. Usage Copy the dbghelper.dll and SHCore.dll to following location...
Mass-CVE-2025-29306
FoxCMS Mass Exploiter CVE-2025-29306 A specialized automation tool for security researchers to perform remote command execution RCE testing across multiple targets. ๐ก๏ธ Security Note This program is written in Bash and has been encrypted/compiled with SHC Shell Script Compiler. The source code is...
Prestashop-CVE-2024-34716
Exploit Script for CSRF and Reverse Shell Attack This script automates a CSRF Cross-Site Request Forgery exploit to upload a PHP reverse shell on a target's web server and execute it. The reverse shell is delivered as a ZIP file via a crafted CSRF payload, which is triggered when a privileged use...
spring4shell-poc
Spring4Shell POC Descripciรณn de la vulnerabilidad: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construcciรณn del POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Pasos para construir/ejecutar Probado con JDK 11.0.14, Spring Boot 2.6.5 y Apache Tomcat 9.0.6...
CVE-2023-6019
Python POC Derived from Authors POC Usage python3 CVE-2023-6019.py -t 192.168.191.37 -p 9000 -l 192.168.45.xxx -lp 4444...
CVE-2023-33538-msf
CVE-2023-33538 โ TP-Link TL-WR940N/841N Command Injection Metasploit module This Metasploit auxiliary module targets an authenticated command injection vulnerability in TP-Link TL-WR940N V2/V4 and TL-WR841N V8/V10 routers. The issue lies in the vulnerable ssid1 parameter used in WlanNetworkRpm.ht...
CVE-2019-11043_env
CVE-2019-11043env remote debug environment for CLion...
CVE-2022-2992
CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...
MAL-2026-17791 Malicious code in multichain-rpc (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5765482ebcff5ac393edb3ce06164e7c697a00aa7e32c92b1272dc20184b424 The gem's extconf.rb, executed automatically by gem install as a native-extension build step, base64-decodes a Ruby payload and runs it via eval insi...
MAL-2026-17801 Malicious code in web3-signer-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe57c8011ef7048ef33ccdb828615b8efd9ab10799a2a730d12c2d854c2e0895 The gem's extconf.rb decodes a base64 literal and eval's it at gem install time inside a double-forked, session-detached child whose stdio is...
CVE-2023-50132
CVE-2023-50132 Suggested description Sourcecodester School Visitor Log e-book v1.0 is vulnerable to Cross Site Scripting XSS. Additional Information youtube link: https://youtu.be/W7Oen8rs64 Vulnerability Type Cross Site Scripting XSS Vendor of Product https://www.sourcecodester.com/ Affected...
CVE-2023-21716-POC
CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...
CVE-2023-46805
Title: Proof of Concept for CVE-2023-46805 - For Educational Use Only License: This work is placed under the Creative Commons Attribution 4.0 International License CC BY 4.0. You are free to share, copy, distribute, and transmit this work, to adapt it or use it for other purposes, provided the...
MAL-2026-17783 Malicious code in defi-yield-calculator (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8b3e50479b61d2ff6e2f5a19de20473cf8fc3c91f99945aff51f112a617192 The gem ships an ext/extconf.rb that base64-decodes an embedded Ruby payload and runs it via eval inside a double-forked, detached, stdio-nulled...
ProFTPD_CVE-2015-3306
m4ud ProFTPD 1.3.5 RCE exploit CVE : 2015-3306! ProFTPd 1.3.5 RCE Usage: ProFTPD.py options Options: -h, --help show this help message and exit -l LHOST, --lhost=LHOST Local IP Required for Reverse Shell, -p LPORT, --lport=LPORT Port Required for Reverse Shell, -t TARGET, --target=TARGET Vulnerab...
RCE-CVE-2025-3248
Authenticated CVE-2025-3248 Langflow Remote Code Execution This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit. Features Authenticated Command Execution: Run arbitrary system comman...
CVE-2024-21413
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u sender email address -p sender password -d...
CVE-2024-3094
๐จ CVE-2024-3094 โ XZ Utils Backdoor ๐ง Overview CVE-2024-3094 is a critical supply chain compromise affecting the widely used XZ Utils compression library. A malicious actor inserted a stealth backdoor into upstream releases, enabling remote code execution RCE via tampered liblzma. โ ๏ธ This...
CVE-2025-22777
CVE-2025-22777 GiveWP โ Donation Plugin and Fundraising Platform = 3.19.3 - Unauthenticated PHP Object Injection Description The GiveWP โ Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.3 via...