There are 6 repositories under rce-exploit topic.
WPS-Office 1-Click RCE exp 202308091546
Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)
CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit
WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your shell :)
CVE-2025-54424:1Panel 客户端证书绕过RCE漏洞 一体化工具 (扫描+利用)
Laravel RCE Exploitation Toolkit
Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856)
POC - CVE-2024–10914- Command Injection Vulnerability in `name` parameter for D-Link NAS
POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692
CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)
PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template
Apache OFBIZ Path traversal leading to RCE POC[CVE-2024-32113 & CVE-2024-36104]
WonderCMS Authenticated RCE - CVE-2023-41425
Compromise a web application and delve deeper into the network to access hosts that you cannot directly reach from your attack host using different approaches.
VFGadget locator to facilitate Counterfeit Object-Oriented Programming (COOP) and Loop-Oriented Programming (LOP) attacks to bypass advanced security protections like Intel CET and Control-Flow Guard (CFG) to achieve Remote Code Execution.
A fully public exploit of the CVE-2020-0022 BlueFrag Android RCE Vulnerability (tested on Pixel 3 XL)
通达OA OfficeTask udp 2397 端口远程代码执行RCE检测工具
CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service
This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution.
Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.
Python package dependency confusion vulnerability POC. Impact this vulnerability is Remote code execution (RCE)
This is a POC for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks within the code.
A PoC exploit for CVE-2020-13945 - Apache APISIX Remote Code Execution (RCE)
A PoC exploit for CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution (RCE)
an advanced python-based web shell uploader
Metabase Pre-auth RCE (CVE-2023-38646)
CVE-2024-50623 POC - Cleo Unrestricted file upload and download
it is script that enables Telnet on routers by sending a specially crafted request. The script allows users to specify the router's URL, Telnet port, and password. It validates the inputs and logs the process, providing feedback on whether the exploit was successful.
Perform With Massive Openfire Unauthenticated Users
POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) due to improper input sanitization