Indirect Prompt Injection to RCE (CVSS 10.0) — XSS primitive escalates to arbitrary command execution via AI agent. CAN-2026-2036559. Full exploit chain. PoC advisory.
-
Updated
Oct 6, 2026
#
rce-exploit
Here are 105 public repositories matching this topic...
🛠️ Exploit remote code execution vulnerability in XWiki through SolrSearch, affecting the platform’s security and user data integrity.
linux shell bash groovy kernel hack proof-of-concept poc xwiki hackthebox hacking-tools remote-code-execution remote-command-execution rce-exploit cve-2025-24893 groovyinjection cve-2015-24893 cve-2025-24893-exploit
-
Updated
Oct 5, 2026 - Python
CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐
-
Updated
Oct 5, 2026 - Python
Gotenberg RCE Chain — CVE-2026-42589 + CVE-2026-40281
python tools cybersecurity rce bugbounty ethical-hacking gotenberg rce-exploit rce-testing hackfut cve-2026-42589 cve-2026-40281
-
Updated
Oct 3, 2026 - Python
CVE-2026-87902 — WordPress Core LFI → RCE by Hackfut
python hacking cybersecurity rce pentesting ethical-hacking lfi rce-exploit webexploitation cve-2026-87902
-
Updated
Oct 3, 2026
Operational research on the modern multi-stage chain
-
Updated
Oct 1, 2026
Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.
wordpress wordpress-plugin exploit hacking python3 rce vulnerability pentesting python-3 security-research security-researcher remote-code-execution rce-exploit bricksbuilder bricks-builder cve-2024-25600
-
Updated
Sep 13, 2026 - Python
LAB-RCE - 3 jalur Remote Code Execution (CWE-78 command injection, CWE-95 eval, CWE-434 upload webshell) - tugas kuliah keamanan web
-
Updated
Sep 9, 2026 - PHP
Static analysis of an obfuscated iOS JavaScript loader with 18 recovered modules and an inert reproducible build.
-
Updated
Sep 7, 2026 - JavaScript
tools network scanner mitm wifi arp cybersecurity kali-linux security-tools osint-tool rce-exploit keyyloger
-
Updated
Oct 1, 2026 - Python
halo cms plugin 1-request rce from a url, PoC + exploit chain
-
Updated
Aug 19, 2026 - Python
Here You Can Find Lots of Windows Remote Code Execution(RCE) Exploits
-
Updated
Aug 18, 2026 - Python
The WinRAR Exploit Builder is a C# project designed to create an exploit targeting a vulnerability in WinRAR.
pdf security exploit archive cve exploit-database pdf-format 0day winrar exploit-kit exploit-development aslr-bypass rce-exploit pdf-exploit zeroday-attack 0day-exploits 0day-exploit zero-day-exploit 0day-2024 winrar-exploit
-
Updated
Aug 15, 2026 - C#
CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection
-
Updated
Aug 8, 2026 - Go
Stable POC for CVE-2026-25243 (Redis RESTORE double-free -> remote code execution)
-
Updated
Aug 6, 2026 - Python
Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a vulnerable environment with Docker and includes a Go-based brute-forcer that cracks the weak mt_rand hash to create an administrator account.
wordpress wordpress-plugin security proof-of-concept exploit poc rce vulnerability cve privilege-escalation litespeed unauthenticated cve-exploit rce-exploit wordpress-vulnerability litespeed-cache cve-2024-28000 cve-2024-28000-exploit wordpress-cve-2024-28000 unauthenticated-privilege-escalation
-
Updated
Jul 30, 2026 - Go
PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template
-
Updated
Jul 30, 2026 - Go
RCE FILES
-
Updated
Jul 30, 2026 - Python
CVE-2021-41773 Apache
python python-script apache python3 apache2 cve lfi-exploitation rce-exploit cve-2021-41773 cve-2021-41773-poc
-
Updated
Jul 23, 2026 - Python
Add this topic to your repo
To associate your repository with the rce-exploit topic, visit your repo's landing page and select "manage topics."