CVE-2023-46747

CVE-2023-46747 An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs This is an script indented forto exploit the Remote code Execution on Vulnerable f5-BIG Ip products Installation: git clone...

CVE-2025-49113-nuclei-template

Nuclei vulnerability detection template - CVE-2025-49113 - Roundcube ≤ 1.6.10 Post-Authentication Remote Code Execution CVE ID: CVE-2025-49113 Severity: Critical CVSS 10.0 Discovered by: Kirill Firsov FearsOff Date Disclosed: June 1, 2025 Fixed in: Roundcube 1.6.11 / 1.5.10 LTS -...

CNVD-C-2019-48814

CNVD-C-2019-48814 WebLogic wls9-async Deserialization Remote Command Execution Vulnerability Echo PoC for WebLogic Patch update: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html Vulnerability Reproduction: http://10.10.20.166:7001/async/AsyncResponseService cu...

cve-2019-6340-bits

cve-2019-6340-bits Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE modsec rule pcap example nginx config example logs example playbook...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600-Drupal-RCE...

CVE-2021-3129

CVE-2021-3129 Laravel debug mode - Remote Code Execution RCE https://vulners.com/cve/CVE-2021-3129 https://www.ambionics.io/blog/laravel-debug-rce https://github.com/ambionics/phpggc Example python3 exploit.py http://127.0.0.1:8080 python3 exploit.py http://127.0.0.1:8080 --phar $php -d...

text4shell

text4shell A demonstration of CVE-2022-42889 text4shell remote code execution vulnerability. Details in Don't Panic!: CVE-2022-42889 Text4shell vulnerability in Apache Commons Text...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Flink_RCE

Apache Flink Web Dashboard Unauthorized Access, Uploading Malicious jar Leads to Remote Code Command Execution msf nc python usage: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

CVE-2020-6287_RECON-scanner

Vulnerability Assessment and Indicator of Compromise IoC Scanner for CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver is a critical CVSSv3 10 vulnerability affecting a number of SAP business and technical applications running on top of the SAP NetWeaver Java stack. This...

fastjson-RCE

fastjson-v1.2.47-RCE Vulnerability Reproduction fastjson-1.2.47 == Resource Download: 下载 http://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.47/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/archive/1.2.47.zip jar...

fastjson-1.2.60-rce

Fastjson = 1.2.60 Deserialization Vulnerability By Pass autoType Block List with 2 Gadgets JNDIConfiguration, OracleManagedConnectionFactory Gadgets 经过测试，命中的4个文件都是可以利用的。 不过其中HikariConfig类就是前文提到的类，在最新版本被加入黑名单，JNDIConnectionPool类在42版本前就被加入黑名单了。 另外的两个类JNDIConfiguration和...

e-cology

Weaver e-cology OA Beanshell Component Remote Code Execution Windows Linux Notes Detect the target system's os.name if the target system is Windows, executing commands such as set requires manually typing cmd.exe /c set Use Unicode to bypass the exec filter on some sites. Payload...

CVE-2017-1000117

CVE-2017-1000117 Project Introduction One of the selected topics for the cybersecurity course project Reproduction of CVE-2017-1000117 vulnerability PoC + Exploit Git + SSH Vulnerability Introduction: Vulnerability Name: Git command injection vulnerability CNNVD ID: CNNVD-201708-670 Hazard Level:...

CVE-2019-0708

CVE-2019-0708 Introduction Microsoft has released its monthly security update for May. Included in this month's Patch Tuesday release is CVE-2019-0708, a critical remote code execution vulnerability that could allow an unauthenticated remote attacker to execute remote code on a vulnerable target...

EUVD-2026-97817

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validating the URL scheme. An attacker able to...

CVE-2026-109575

In HAProxy Data Plane API 2.2.0 through 3.4.3 and corresponding Enterprise Edition releases, Server.ConfigureAPI has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority tlsca is configured and a numeric TLS...

cve-2022-42889-text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

EUVD-2026-97814

A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried...

CVE-2026-108924

The getkirby Kirby CMS (versions up to 4.9.5 and 5.5.3 ) contains an authorization bypass vulnerability in the Dynamic Option Generation component. Specifically, the OptionsQuery::resolve function within the file src/Option/OptionsQuery.php is affected. This flaw can be exploited remotely to bypa...