CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian CVSS Score - 7.6 🔥 Description This High severity RCE Remote Code Execution vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE Remote Code...

ESPTouchCatcher

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2020-12702 Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi...

eWeLink-QR-Code

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2021-27941 Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker...

CVE-2023-46980

CVE-2023-46980 An issue in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. Additional Information Video POC Link On YT ; https://youtu.be/3Mz2lSElg7Y Vulnerability Type Incorrect Access...

Disable-IPv6-CVE-2024-38063-Fix

Disable IPv6 to Mitigate CVE-2024-38063 Without Installing KB Update Overview This script is designed to mitigate the effects of the critical vulnerability CVE-2024-38063, a remote code execution RCE vulnerability in the Windows TCP/IP stack related to IPv6. By disabling IPv6 on the system, this...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN Vulnerability 🔍 Overview CVE-2018-13379 is a critical path traversal vulnerability in Fortinet FortiOS SSL VPN. It allows attackers to download VPN web session files and extract sensitive information. Impact: Information disclosure usernames, session tokens...

xzutils_backdoor_obfuscation

xzutilsbackdoorobfuscation This script recreates the obfuscation technique used for the XZ utils attack CVE-2024-3094. It has been tested for xzutils v5.6.0 only. ⚠️ This code is provided for educational purposes only and should not be used for malicious activities. Use at your own risks. ⚠️...

log4shell

Log4Shell CVE-2021-44228 PoC Objective Reproduce, exploit, and remediate a known critical CVE in a Dockerised environment. This PoC demonstrates CVE-2021-44228 Log4Shell in a Spring Boot application. 1. Vulnerability Description CVE: 2021-44228 CVSS: 10.0 Critical Affected component: Apache Log4j...

CVE-2021-21975

CVE-2021-21975 SSRF-POC - ssrf to cred leak First configure pd client. Now run ./pd deploy http-new-requests now replace the pipedream http request ex: Randomstring.m.pipedream.net in the script run this in a seperate terminal - ./pd logs new-requests | tee -a req.txt and now run this in another...

CVE-2025-65900

CVE-2025-65900: Kalmia CMS v0.2.0 - is vulnerable to Incorrect Access Control Vulnerability Overview CVE ID: CVE-2025-65900 Product: DifuseHQ Kalmia CMS Affected Version: 0.2.0 Vulnerability Type: Incorrect Access Control Privileges Required: Low Read-only user account Impact This vulnerability...

CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC Demonstrates how CVE-2025-54100 can cause Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. What is CVE-2025-54100? Vulnerability Type: Risk of command injection when Invoke-WebRequest does not use the...

CVE-2021-3441-check

HP CVE Check A python threat intelligence tool for automating IoC discovery for CVE-2021-3441. Easily search targets for indicators of compromnise root@kitploit: //| ////|| CVE-2021-3441 Check |=== |----| || | | �| || Author: Tyler Butler || �| || @tbutler0x90 | ||/.�---.|| | || |-||/||-. | |�...

CVE-2024-46506

CVE-2024-46506 Esta es una implementación independiente en Python para CVE-2024-46506. Creé este script porque solo pude encontrar el módulo de Metasploit y necesitaba una versión ligera y portátil que no requiriera el framework completo de Metasploit. Descargo de responsabilidad Esta herramienta...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: Critical Pre-Authentication RCE in React Server Components Security Research byschema.cx "Control is an illusion. It's the systems we build that control us—unless we understand them first." 📋 Table of Contents Disclaimer & Legal Notice Executive Summary Technical Description...

CVE-2019-14322-scanner

CVE-2019-14322-scanner A vulnerability was found in Pallets Werkzeug up to 0.15.4. It has been declared as critical. This vulnerability affects the function SharedDataMiddleware of the component Windows. The manipulation with an unknown input leads to a directory traversal vulnerability. The CWE...

CVE-2024-32002

CVE-2024-32002 RCE PoC Overview This repository contains a Proof of Concept PoC for CVE-2024-32002, a Remote Code Execution RCE vulnerability in Git submodules. The exploit demonstrates how a malicious payload can be triggered via a recursive clone of a Git repository. Repository Setup Before...

CVE-2025-30208-Vite

CVE-2025-30208 | Vite Script This tool is used to detect whether the target system has the CVE-2025-30208 vulnerability. This vulnerability allows an attacker to read sensitive files such as /etc/passwd or C:\windows\win.ini from the server via a specific path. The tool supports single URL...

winrar-cve-2023-38831-poc-gen

CVE-2023-38831 Exploit Generator This tool is a Python script that exploits a vulnerability in the RAR file format CVE-2023-38831 to execute a malicious command when a user opens a bait file. The exploit works on WinRAR versions before 6.23. For Example 6.22, 6.21, 6.20 or above. Requirements...

cve-2025-2945-poc

pgAdmin4 Query Tool Authenticated RCE PoC Standalone python script to exploit pgAdmin4 query tool authenticated RCE vulnerability CVE-2025-2945 in pgAdmin4 version 8.10 - 9.1. Ported from Metasploit module: pgadminquerytoolauthenticated.rb References: https://vulners.com/cve/CVE-2025-2945...

CVE-2024-48990

CVE-2024-48990 !WARNING These files and informations are intended for educational purpose only. The author is not responsible for any malicious behavior. All informations provided are not intended to incite any type of crime or abuse. Description Qualys discovered that needrestart, before version...