Vulhub Logo
Vulhub

Vulnerable Environments

Browse our collection of pre-built vulnerable environments for security research and education. Each environment is containerized with Docker and comes with detailed documentation.

181 Results in RCE

RCECMS

CraftCMS ConditionsController Pre-Auth Remote Code Execution

Explore the CraftCMS ConditionsController Pre-Auth Remote Code Execution vulnerability and learn how to exploit it.

CVE-2023-41892
Created 2 days ago
RCE

Cacti RRDTool Post-Auth Argument Injection Leads to RCE

Explore the Cacti RRDTool Post-Auth Argument Injection Leads to RCE vulnerability and learn how to exploit it.

CVE-2025-24367
Created 3 days ago
SQL InjectionRCE

Cacti graph_view.php SQL Injection Leads to RCE

Explore the Cacti graph_view.php SQL Injection Leads to RCE vulnerability and learn how to exploit it.

CVE-2023-39361CVE-2024-31459
Created 3 days ago
RCE

ImageMagick Imagetragick Command Injection

Explore the ImageMagick Imagetragick Command Injection vulnerability and learn how to exploit it.

CVE-2016-3714
Created 4 days ago
RCEDeserialization

Apache Superset Python Pickle Deserialization Leads to RCE

Explore the Apache Superset Python Pickle Deserialization Leads to RCE vulnerability and learn how to exploit it.

CVE-2023-37941
Created 5 days ago
RCEDeserializationWebserver

Tomcat Session Deserialization Remote Code Execution

Explore the Tomcat Session Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2025-24813
Created 16 days ago
RCEDeserialization

Apache HertzBeat SnakeYaml Deserialization Remote Code Execution

Explore the Apache HertzBeat SnakeYaml Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2024-42323
Created 24 days ago
RCE

Kibana 7.6.2 upgrade-assistant-telemetry Prototype Pollution Leads to RCE

Explore the Kibana 7.6.2 upgrade-assistant-telemetry Prototype Pollution Leads to RCE vulnerability and learn how to exploit it.

CVE-2020-7012
Created 24 days ago
RCE

Apache HugeGraph Unauthenticated Remote Code Execution

Explore the Apache HugeGraph Unauthenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2024-27348
Created 2 months ago
RCE

GeoServer Remote Code Injection caused by JAI-EXT

Explore the GeoServer Remote Code Injection caused by JAI-EXT vulnerability and learn how to exploit it.

CVE-2022-24816CVE-2023-35042
Created 2 months ago
RCECMS

CraftCMS register_argc_argv Leads to Remote Code Execution

Explore the CraftCMS register_argc_argv Leads to Remote Code Execution vulnerability and learn how to exploit it.

CVE-2024-56145
Created 3 months ago
RCE

OpenPrinting Cups-Browsed Remote Code Execution via The FoomaticRIPCommandLine PPD parameter

Explore the OpenPrinting Cups-Browsed Remote Code Execution via The FoomaticRIPCommandLine PPD parameter vulnerability and learn how to exploit it.

CVE-2024-47177
Created 6 months ago
RCESSRF

Apache OFBiz SSRF and Remote Code Execution

Explore the Apache OFBiz SSRF and Remote Code Execution vulnerability and learn how to exploit it.

CVE-2024-45507
Created 7 months ago
RCEAuth Bypass

Apache OFBiz Authentication Bypass Leads to RCE

Explore the Apache OFBiz Authentication Bypass Leads to RCE vulnerability and learn how to exploit it.

CVE-2024-45195
Created 7 months ago
RCEAuth Bypass

Apache OFBiz Authentication Bypass Leads to RCE

Explore the Apache OFBiz Authentication Bypass Leads to RCE vulnerability and learn how to exploit it.

CVE-2024-38856
Created 7 months ago
RCEAuth Bypass

Alibaba Nacos Authentication Bypass and Remote Code Execution

Explore the Alibaba Nacos Authentication Bypass and Remote Code Execution vulnerability and learn how to exploit it.

CVE-2021-29442
Created 9 months ago
RCEExpression Injection

GeoServer Unauthenticated Remote Code Execution in Evaluating Property Name Expressions

Explore the GeoServer Unauthenticated Remote Code Execution in Evaluating Property Name Expressions vulnerability and learn how to exploit it.

CVE-2024-36401
Created 9 months ago
RCE

ShowDoc Unauthenticated File Upload and Remote Code Execution

Explore the ShowDoc Unauthenticated File Upload and Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 10 months ago
RCEPath Traversal

PHP File Read to Remote Code Execution Through GNU C Library Iconv

Explore the PHP File Read to Remote Code Execution Through GNU C Library Iconv vulnerability and learn how to exploit it.

CVE-2024-2961
Created 10 months ago
RCE

PDF.js Arbitrary JavaScript Code Execution

Explore the PDF.js Arbitrary JavaScript Code Execution vulnerability and learn how to exploit it.

CVE-2024-4367
Created 10 months ago
RCEAuth Bypass

AJ-Report Authentication Bypass and Remote Code Execution

Explore the AJ-Report Authentication Bypass and Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 10 months ago
RCESSTI

JeecgBoot JimuReport FreeMarker Server Side Template Injection RCE

Explore the JeecgBoot JimuReport FreeMarker Server Side Template Injection RCE vulnerability and learn how to exploit it.

CVE-2023-4450
Created a year ago
RCEPath Traversal

kkFileView ZipSlip Remote Code Execution

Explore the kkFileView ZipSlip Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created a year ago
RCE

pgAdmin <= 7.6 Authenticated Remote Command Execution

Explore the pgAdmin <= 7.6 Authenticated Remote Command Execution vulnerability and learn how to exploit it.

CVE-2023-5002
Created a year ago
RCE

pgAdmin <= 6.16 Unauthenticated Remote Command Execution

Explore the pgAdmin <= 6.16 Unauthenticated Remote Command Execution vulnerability and learn how to exploit it.

CVE-2022-4223
Created a year ago
RCE

CMS Made Simple (CMSMS) Unauthenticated Remote Code Execution

Explore the CMS Made Simple (CMSMS) Unauthenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2019-9053CVE-2021-26120
Created a year ago
RCEAuth Bypass

Jetbrains TeamCity Authentication Bypass and Remote Command Execution

Explore the Jetbrains TeamCity Authentication Bypass and Remote Command Execution vulnerability and learn how to exploit it.

CVE-2023-42793
Created a year ago
RCEDeserializationWebserver

Adobe ColdFusion XML Deserialization Leads to RCE

Explore the Adobe ColdFusion XML Deserialization Leads to RCE vulnerability and learn how to exploit it.

CVE-2023-29300
Created a year ago
RCEPath TraversalWebserver

Adobe ColdFusion Local File Inclusion Leads to RCE

Explore the Adobe ColdFusion Local File Inclusion Leads to RCE vulnerability and learn how to exploit it.

CVE-2023-26360
Created a year ago
RCEExpression Injection

Atlassian Confluence Pre-Auth Remote Code Execution via OGNL Injection

Explore the Atlassian Confluence Pre-Auth Remote Code Execution via OGNL Injection vulnerability and learn how to exploit it.

CVE-2023-22527
Created a year ago
RCEAuth Bypass

Apache OFBiz Authentication Bypass Leads to RCE

Explore the Apache OFBiz Authentication Bypass Leads to RCE vulnerability and learn how to exploit it.

CVE-2023-51467
Created a year ago
DeserializationRCE

Unsafe deserialization of XMLRPC arguments in Apache OFBiz

Explore the Unsafe deserialization of XMLRPC arguments in Apache OFBiz vulnerability and learn how to exploit it.

CVE-2023-49070
Created a year ago
RCEMessage Queue

Apache ActiveMQ Jolokia Authenticated Remote Code Execution

Explore the Apache ActiveMQ Jolokia Authenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2022-41678
Created a year ago
RCEDeserializationMessage Queue

Apache ActiveMQ OpenWire Protocol Deserialization RCE

Explore the Apache ActiveMQ OpenWire Protocol Deserialization RCE vulnerability and learn how to exploit it.

CVE-2023-46604
Created a year ago
RCE

MeterSphere Plugin Endpoint Remote Code Execution

Explore the MeterSphere Plugin Endpoint Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 2 years ago
RCE

Metabase Pre-Auth JDBC Remote Code Execution

Explore the Metabase Pre-Auth JDBC Remote Code Execution vulnerability and learn how to exploit it.

CVE-2023-38646
Created 2 years ago
RCEMessage Queue

Apache RocketMQ Broker Remote Command Execution

Explore the Apache RocketMQ Broker Remote Command Execution vulnerability and learn how to exploit it.

CVE-2023-33246
Created 2 years ago
RCE

OpenTSDB Arbitrary Command Injection Remote Code Execution

Explore the OpenTSDB Arbitrary Command Injection Remote Code Execution vulnerability and learn how to exploit it.

CVE-2023-25826
Created 2 years ago
RCE

Apache Druid Embedded Javascript Remote Code Execution

Explore the Apache Druid Embedded Javascript Remote Code Execution vulnerability and learn how to exploit it.

CVE-2021-25646
Created 2 years ago
RCEMessage Queue

Apache Kafka Clients JNDI Injection

Explore the Apache Kafka Clients JNDI Injection vulnerability and learn how to exploit it.

CVE-2023-25194
Created 2 years ago
RCEWebserver

WebLogic Unauthorized Remote Code Execution

Explore the WebLogic Unauthorized Remote Code Execution vulnerability and learn how to exploit it.

CVE-2023-21839
Created 2 years ago
RCE

Cacti remote_agent.php Pre-Auth Command Injection

Explore the Cacti remote_agent.php Pre-Auth Command Injection vulnerability and learn how to exploit it.

CVE-2022-46169
Created 2 years ago
SQL InjectionRCE

YApi NoSQL Injection to Remote Command Execution

Explore the YApi NoSQL Injection to Remote Command Execution vulnerability and learn how to exploit it.

N/A
Created 2 years ago
RCEDatabase

CouchDB Erlang Distributed Protocol Code Execution

Explore the CouchDB Erlang Distributed Protocol Code Execution vulnerability and learn how to exploit it.

CVE-2022-24706
Created 2 years ago
RCEAuth BypassWebserver

Apache APISIX Dashboard API Permission Bypass to RCE

Explore the Apache APISIX Dashboard API Permission Bypass to RCE vulnerability and learn how to exploit it.

CVE-2021-45232
Created 2 years ago
RCEExpression Injection

Atlassian Confluence Pre-Auth Remote Code Execution via OGNL Injection

Explore the Atlassian Confluence Pre-Auth Remote Code Execution via OGNL Injection vulnerability and learn how to exploit it.

CVE-2022-26134
Created 3 years ago
RCE

Bash Shellshock Remote Command Injection

Explore the Bash Shellshock Remote Command Injection vulnerability and learn how to exploit it.

CVE-2014-6271
Created 3 years ago
RCEFramework

Spring Framework Data Binding Remote Code Execution on JDK 9+

Explore the Spring Framework Data Binding Remote Code Execution on JDK 9+ vulnerability and learn how to exploit it.

CVE-2022-22965
Created 3 years ago
RCEExpression InjectionFramework

Spring Cloud Function SpEL Expression Command Injection

Explore the Spring Cloud Function SpEL Expression Command Injection vulnerability and learn how to exploit it.

CVE-2022-22963
Created 3 years ago
RCE

Apache Airflow Command Injection

Explore the Apache Airflow Command Injection vulnerability and learn how to exploit it.

CVE-2020-11978
Created 3 years ago
RCE

Apache Airflow Celery Message Middleware Command Execution

Explore the Apache Airflow Celery Message Middleware Command Execution vulnerability and learn how to exploit it.

CVE-2020-11981
Created 3 years ago
RCEDatabase

Redis Lua Sandbox Bypass Command Execution

Explore the Redis Lua Sandbox Bypass Command Execution vulnerability and learn how to exploit it.

CVE-2022-0543
Created 3 years ago
RCE

YApi Open Registration due to RCE

Explore the YApi Open Registration due to RCE vulnerability and learn how to exploit it.

N/A
Created 3 years ago
RCEExpression InjectionFramework

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution

Explore the Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution vulnerability and learn how to exploit it.

CVE-2022-22947
Created 3 years ago
RCE

elFinder ZIP Parameter and Arbitrary Command Injection

Explore the elFinder ZIP Parameter and Arbitrary Command Injection vulnerability and learn how to exploit it.

CVE-2021-32682
Created 3 years ago
RCEHard CodingWebserver

Apache APISIX Hardcoded API Token Leads to RCE

Explore the Apache APISIX Hardcoded API Token Leads to RCE vulnerability and learn how to exploit it.

CVE-2020-13945
Created 3 years ago
RCEEnvironment Injection

GoAhead Web Server Environment Variables Injection and `LD_PRELOAD` Remote Code Execution

Explore the GoAhead Web Server Environment Variables Injection and `LD_PRELOAD` Remote Code Execution vulnerability and learn how to exploit it.

CVE-2021-42342
Created 3 years ago
RCE

Apache Log4j2 lookup JNDI Injection

Explore the Apache Log4j2 lookup JNDI Injection vulnerability and learn how to exploit it.

CVE-2021-44228
Created 3 years ago
RCE

GitLab Remote Command Execution

Explore the GitLab Remote Command Execution vulnerability and learn how to exploit it.

CVE-2021-22205
Created 3 years ago
RCE

OpenTSDB Arbitrary Command Injection Remote Code Execution

Explore the OpenTSDB Arbitrary Command Injection Remote Code Execution vulnerability and learn how to exploit it.

CVE-2020-35476
Created 4 years ago
DeserializationRCE

Neo4j Shell Server Deserialization

Explore the Neo4j Shell Server Deserialization vulnerability and learn how to exploit it.

CVE-2021-34371
Created 4 years ago
RCEExpression Injection

Atlassian Confluence Webwork Pre-Auth OGNL Injection Leads to RCE

Explore the Atlassian Confluence Webwork Pre-Auth OGNL Injection Leads to RCE vulnerability and learn how to exploit it.

CVE-2021-26084
Created 4 years ago
DeserializationRCE

Apache Dubbo Java Deserialization

Explore the Apache Dubbo Java Deserialization vulnerability and learn how to exploit it.

CVE-2019-17564
Created 4 years ago
RCE

OpenSMTPD Remote Command Execution

Explore the OpenSMTPD Remote Command Execution vulnerability and learn how to exploit it.

CVE-2020-7247
Created 4 years ago
RCEDeserialization

XStream Deserialization Command Execution

Explore the XStream Deserialization Command Execution vulnerability and learn how to exploit it.

CVE-2021-21351
Created 4 years ago
RCEDeserialization

XStream Deserialization Command Execution

Explore the XStream Deserialization Command Execution vulnerability and learn how to exploit it.

CVE-2021-29505
Created 4 years ago
RCE

gitlist 0.6.0 Remote Command Execution

Explore the gitlist 0.6.0 Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-1000533
Created 4 years ago
RCE

ImageMagick PDF Password Location Command Injection

Explore the ImageMagick PDF Password Location Command Injection vulnerability and learn how to exploit it.

CVE-2020-29599
Created 4 years ago
RCEBackdoor

PHP 8.1.0-dev User-Agentt Backdoor Remote Code Execution

Explore the PHP 8.1.0-dev User-Agentt Backdoor Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 4 years ago
RCEAuth Bypass

PHP-FPM FastCGI Unauthorized Access Leads to Remote Code Execution

Explore the PHP-FPM FastCGI Unauthorized Access Leads to Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 4 years ago
RCEFramework

Laravel Ignition 2.5.1 Remote Code Execution

Explore the Laravel Ignition 2.5.1 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2021-3129
Created 4 years ago
RCE

Zabbix Server Active Proxy Trapper Command Injection Bypass

Explore the Zabbix Server Active Proxy Trapper Command Injection Bypass vulnerability and learn how to exploit it.

CVE-2020-11800
Created 4 years ago
RCE

Zabbix Server Active Proxy Trapper Command Injection

Explore the Zabbix Server Active Proxy Trapper Command Injection vulnerability and learn how to exploit it.

CVE-2017-2824
Created 4 years ago
RCEFramework

Struts2 S2-061 Remote Command Execution

Explore the Struts2 S2-061 Remote Command Execution vulnerability and learn how to exploit it.

CVE-2020-17530
Created 4 years ago
RCEExpression Injection

Apache Unomi Expression Language Injection RCE

Explore the Apache Unomi Expression Language Injection RCE vulnerability and learn how to exploit it.

CVE-2020-13942
Created 4 years ago
RCE

SaltStack Command Injection Remote Code Execution

Explore the SaltStack Command Injection Remote Code Execution vulnerability and learn how to exploit it.

CVE-2020-16846
Created 4 years ago
RCEWebserver

WebLogic Management Console Unauthorized Remote Command Execution

Explore the WebLogic Management Console Unauthorized Remote Command Execution vulnerability and learn how to exploit it.

CVE-2020-14882
Created 4 years ago
RCEDeserialization

Apache OfBiz Deserialization Command Execution

Explore the Apache OfBiz Deserialization Command Execution vulnerability and learn how to exploit it.

CVE-2020-9496
Created 4 years ago
RCEFramework

Struts2 S2-059 Remote Command Execution

Explore the Struts2 S2-059 Remote Command Execution vulnerability and learn how to exploit it.

CVE-2019-0230
Created 5 years ago
DeserializationRCE

Mojarra JSF ViewState Deserialization

Explore the Mojarra JSF ViewState Deserialization vulnerability and learn how to exploit it.

N/A
Created 5 years ago
RCEDeserialization

Apereo CAS 4.1 Deserialization Command Execution

Explore the Apereo CAS 4.1 Deserialization Command Execution vulnerability and learn how to exploit it.

N/A
Created 5 years ago
RCEFramework

S2-032 Remote Code Execution

Explore the S2-032 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2016-3081
Created 5 years ago
RCEDeserialization

Liferay Portal CE Deserialization Remote Code Execution

Explore the Liferay Portal CE Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2020-7961
Created 5 years ago
RCE

Nexus Repository Manager 3 Authenticated Remote Code Execution

Explore the Nexus Repository Manager 3 Authenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2020-10199
Created 5 years ago
RCE

Nexus Repository Manager 3 Authenticated Remote Code Execution

Explore the Nexus Repository Manager 3 Authenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2020-10204
Created 5 years ago
RCEDeserialization

Java < JDK8u232_b09 RMI Registry Deserialization Remote Code Execution Bypass

Explore the Java < JDK8u232_b09 RMI Registry Deserialization Remote Code Execution Bypass vulnerability and learn how to exploit it.

N/A
Created 5 years ago
RCEDeserialization

Java <= JDK 8u111 RMI Registry Deserialization Remote Code Execution

Explore the Java <= JDK 8u111 RMI Registry Deserialization Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 5 years ago
RCE

Kibana Prototype Chain Pollution to Arbitrary Code Execution

Explore the Kibana Prototype Chain Pollution to Arbitrary Code Execution vulnerability and learn how to exploit it.

CVE-2019-7609
Created 5 years ago
RCEExpression Injection

Apache Solr Remote Code Execution Via Velocity Template

Explore the Apache Solr Remote Code Execution Via Velocity Template vulnerability and learn how to exploit it.

CVE-2019-17558
Created 5 years ago
RCE

Mongo Express Remote Code Execution

Explore the Mongo Express Remote Code Execution vulnerability and learn how to exploit it.

CVE-2019-10758
Created 5 years ago
RCEDeserializationHard Coding

Apache Shiro 1.2.4 Deserialization Remote Code Execution

Explore the Apache Shiro 1.2.4 Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2016-4437
Created 5 years ago
RCE

GhostScript Sandbox Bypass Command Execution

Explore the GhostScript Sandbox Bypass Command Execution vulnerability and learn how to exploit it.

CVE-2018-19475
Created 5 years ago
RCE

PHP-FPM Remote Code Execution

Explore the PHP-FPM Remote Code Execution vulnerability and learn how to exploit it.

CVE-2019-11043
Created 5 years ago
RCEFramework

S2-045 Remote Code Execution

Explore the S2-045 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-5638
Created 5 years ago
RCEFramework

S2-046 Remote Code Execution

Explore the S2-046 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-5638
Created 5 years ago
RCE

Java RMI codebase Remote Code Execution

Explore the Java RMI codebase Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 5 years ago
RCEDeserialization

Fastjson 1.2.24 Deserialization Remote Command Execution

Explore the Fastjson 1.2.24 Deserialization Remote Command Execution vulnerability and learn how to exploit it.

CVE-2017-18349
Created 6 years ago
RCE

Apache Solr Remote Command Execution

Explore the Apache Solr Remote Command Execution vulnerability and learn how to exploit it.

CVE-2019-0193
Created 6 years ago
RCE

ThinkPHP 2.x Remote Code Execution

Explore the ThinkPHP 2.x Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 6 years ago
Auth BypassRCE

Scrapyd Unauthorized Access

Explore the Scrapyd Unauthorized Access vulnerability and learn how to exploit it.

N/A
Created 6 years ago
RCE

Webmin Remote Command Execution

Explore the Webmin Remote Command Execution vulnerability and learn how to exploit it.

CVE-2019-15107
Created 6 years ago
RCEDeserialization

Fastjson 1.2.47 Deserialization Remote Command Execution

Explore the Fastjson 1.2.47 Deserialization Remote Command Execution vulnerability and learn how to exploit it.

N/A
Created 6 years ago
SSTIRCE

Atlassian Jira Template Injection

Explore the Atlassian Jira Template Injection vulnerability and learn how to exploit it.

CVE-2019-11581
Created 6 years ago
RCEDatabase

Redis 4.x/5.x Command Execution due to Master-Slave Replication

Explore the Redis 4.x/5.x Command Execution due to Master-Slave Replication vulnerability and learn how to exploit it.

N/A
Created 6 years ago
RCEDeserializationCMS

Drupal Core 8 PECL YAML Deserialization Remote Code Execution

Explore the Drupal Core 8 PECL YAML Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-6920
Created 6 years ago
RCEDeserializationCMS

Drupal Remote Code Execution by phar deserialization

Explore the Drupal Remote Code Execution by phar deserialization vulnerability and learn how to exploit it.

CVE-2019-6339
Created 6 years ago
RCECMS

Drupal Drupalgeddon 3 Authenticated Remote Code Execution

Explore the Drupal Drupalgeddon 3 Authenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2018-7602
Created 6 years ago
RCE

Jenkins Remote Command Execution

Explore the Jenkins Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-1000861
Created 6 years ago
RCEPath Traversal

Atlassian Confluence Path Traversal Leads to RCE

Explore the Atlassian Confluence Path Traversal Leads to RCE vulnerability and learn how to exploit it.

CVE-2019-3396
Created 6 years ago
RCEDatabase

PostgreSQL Arbitrary Command Execution with Admin Privileges

Explore the PostgreSQL Arbitrary Command Execution with Admin Privileges vulnerability and learn how to exploit it.

CVE-2019-9193
Created 6 years ago
RCE

Apache Solr Remote Command Execution

Explore the Apache Solr Remote Command Execution vulnerability and learn how to exploit it.

CVE-2017-12629
Created 6 years ago
RCE

Nexus Repository Manager 3 Unauthenticated Remote Code Execution

Explore the Nexus Repository Manager 3 Unauthenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2019-7238
Created 6 years ago
RCE

GhostScript Sandbox Bypass Command Execution

Explore the GhostScript Sandbox Bypass Command Execution vulnerability and learn how to exploit it.

CVE-2019-6116
Created 6 years ago
RCEWebserver

Apache HTTP Server SSI Remote Command Execution

Explore the Apache HTTP Server SSI Remote Command Execution vulnerability and learn how to exploit it.

N/A
Created 6 years ago
RCE

ThinkPHP5 5.0.23 Remote Code Execution

Explore the ThinkPHP5 5.0.23 Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 6 years ago
RCE

PHP IMAP Remote Command Execution

Explore the PHP IMAP Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-19518
Created 6 years ago
RCE

ThinkPHP5 5.0.22/5.1.29 Remote Code Execution

Explore the ThinkPHP5 5.0.22/5.1.29 Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 6 years ago
Auth BypassRCE

uWSGI Unauthorized Access

Explore the uWSGI Unauthorized Access vulnerability and learn how to exploit it.

N/A
Created 6 years ago
RCE

Python PIL/Pillow Remote Command Execution by GhostScript

Explore the Python PIL/Pillow Remote Command Execution by GhostScript vulnerability and learn how to exploit it.

CVE-2018-16509
Created 6 years ago
RCEDeserialization

Jackson-databind Deserialization Remote Command Execution

Explore the Jackson-databind Deserialization Remote Command Execution vulnerability and learn how to exploit it.

CVE-2017-7525
Created 6 years ago
RCE

GhostScript Sandbox Bypass Command Execution

Explore the GhostScript Sandbox Bypass Command Execution vulnerability and learn how to exploit it.

CVE-2018-16509
Created 7 years ago
SQL InjectionRCECMS

ECShop 2.x/3.x SQL Injection/Arbitrary Code Execution

Explore the ECShop 2.x/3.x SQL Injection/Arbitrary Code Execution vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCE

Electron WebPreferences Remote Command Execution

Explore the Electron WebPreferences Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-15685
Created 7 years ago
RCE

Node-Postgres Remote Code Execution

Explore the Node-Postgres Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-16082
Created 7 years ago
RCEFramework

Struts2 S2-057 Remote Command Execution

Explore the Struts2 S2-057 Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-11776
Created 7 years ago
RCEAuth Bypass

Apache Spark Unauthorized Access Leads to Remote Code Execution

Explore the Apache Spark Unauthorized Access Leads to Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCEPath Traversal

Gitea 1.4.0 Directory Traversal Leading to Remote Command Execution

Explore the Gitea 1.4.0 Directory Traversal Leading to Remote Command Execution vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCE

Discuz 7.x/6.x Remote Code Execution via Global Variable Override

Explore the Discuz 7.x/6.x Remote Code Execution via Global Variable Override vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCE

phpunit Remote Code Execution

Explore the phpunit Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-9841
Created 7 years ago
RCE

phpMyAdmin 4.0.x-4.6.2 Remote Code Execution

Explore the phpMyAdmin 4.0.x-4.6.2 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2016-5734
Created 7 years ago
DeserializationRCE

phpmyadmin scripts/setup.php Deserialization

Explore the phpmyadmin scripts/setup.php Deserialization vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCEDeserializationWebserver

JBoss 4.x JBossMQ JMS Deserialization Remote Code Execution

Explore the JBoss 4.x JBossMQ JMS Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-7504
Created 7 years ago
RCEFramework

Spring Messaging Remote Command Execution

Explore the Spring Messaging Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-1270
Created 7 years ago
RCEPath Traversal

PHP Local File Inclusion RCE with PHPINFO

Explore the PHP Local File Inclusion RCE with PHPINFO vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCEDeserializationWebserver

Weblogic WLS Core Components Deserialization Remote Command Execution

Explore the Weblogic WLS Core Components Deserialization Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-2628
Created 7 years ago
RCECMS

Drupal Drupalgeddon 2 Unauthenticated Remote Code Execution

Explore the Drupal Drupalgeddon 2 Unauthenticated Remote Code Execution vulnerability and learn how to exploit it.

CVE-2018-7600
Created 7 years ago
RCEFramework

Spring Data Commons Remote Command Execution

Explore the Spring Data Commons Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-1273
Created 7 years ago
RCEDeserializationWebserver

JBoss JMXInvokerServlet Deserialization Remote Code Execution

Explore the JBoss JMXInvokerServlet Deserialization Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCEAuth Bypass

Docker Remote API Unauthorized Access Leads to Remote Code Execution

Explore the Docker Remote API Unauthorized Access Leads to Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCEAuth Bypass

Hadoop YARN ResourceManager Unauthorized Access

Explore the Hadoop YARN ResourceManager Unauthorized Access vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCEDeserialization

Apache Log4j TCP Server Deserialization Remote Code Execution

Explore the Apache Log4j TCP Server Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-5645
Created 7 years ago
DeserializationRCEWebserver

Adobe ColdFusion Deserialization

Explore the Adobe ColdFusion Deserialization vulnerability and learn how to exploit it.

CVE-2017-3066
Created 7 years ago
RCEDeserialization

Apache JMeter RMI Deserialization Remote Code Execution

Explore the Apache JMeter RMI Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2018-1297
Created 7 years ago
DeserializationRCEMessage Queue

Apache ActiveMQ Deserialization

Explore the Apache ActiveMQ Deserialization vulnerability and learn how to exploit it.

CVE-2015-5254
Created 7 years ago
RCEFramework

Spring WebFlow Remote Code Execution

Explore the Spring WebFlow Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-4971
Created 7 years ago
RCEDeserializationWebserver

WebLogic < 10.3.6 'wls-wsat' XMLDecoder Deserialization Remote Command Execution

Explore the WebLogic < 10.3.6 'wls-wsat' XMLDecoder Deserialization Remote Command Execution vulnerability and learn how to exploit it.

CVE-2017-10271
Created 7 years ago
RCEFramework

Spring Data Rest Remote Command Execution

Explore the Spring Data Rest Remote Command Execution vulnerability and learn how to exploit it.

CVE-2017-8046
Created 7 years ago
RCEFramework

Spring Security Oauth2 Remote Command Execution

Explore the Spring Security Oauth2 Remote Command Execution vulnerability and learn how to exploit it.

CVE-2016-4977
Created 7 years ago
RCE

Electron Remote Command Execution

Explore the Electron Remote Command Execution vulnerability and learn how to exploit it.

CVE-2018-1000006
Created 7 years ago
RCE

Ruby Net::FTP Module Command Injection

Explore the Ruby Net::FTP Module Command Injection vulnerability and learn how to exploit it.

CVE-2017-17405
Created 7 years ago
RCEEnvironment Injection

GoAhead Web Server Environment Variables Injection and `LD_PRELOAD` Remote Code Execution

Explore the GoAhead Web Server Environment Variables Injection and `LD_PRELOAD` Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-17562
Created 7 years ago
File UploadRCE

Aria2 Arbitrary File Write

Explore the Aria2 Arbitrary File Write vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCE

PHP XDebug Remote Debugging Code Execution

Explore the PHP XDebug Remote Debugging Code Execution vulnerability and learn how to exploit it.

N/A
Created 7 years ago
DeserializationRCECMS

Joomla 3.4.5 Deserialization

Explore the Joomla 3.4.5 Deserialization vulnerability and learn how to exploit it.

CVE-2015-8562
Created 7 years ago
RCEDatabase

CouchDB Arbitrary Command Execution

Explore the CouchDB Arbitrary Command Execution vulnerability and learn how to exploit it.

CVE-2017-12636
Created 7 years ago
RCECMS

Wordpress 4.6 Arbitrary Command Execution (PwnScriptum)

Explore the Wordpress 4.6 Arbitrary Command Execution (PwnScriptum) vulnerability and learn how to exploit it.

N/A
Created 7 years ago
RCEDeserializationWebserver

JBoss 5.x/6.x Deserialization Remote Code Execution

Explore the JBoss 5.x/6.x Deserialization Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-12149
Created 7 years ago
RCEFramework

S2-016 Remote Code Execution

Explore the S2-016 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2013-2251
Created 7 years ago
RCE

Python PIL/Pillow Remote Command Execution by GhostScript GhostButt

Explore the Python PIL/Pillow Remote Command Execution by GhostScript GhostButt vulnerability and learn how to exploit it.

CVE-2017-8291
Created 8 years ago
RCEFramework

S2-053 Remote Code Execution

Explore the S2-053 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-12611
Created 8 years ago
RCEFramework

S2-052 Remote Code Execution

Explore the S2-052 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-9805
Created 8 years ago
RCE

Supervisord XML-RPC Remote Command Execution

Explore the Supervisord XML-RPC Remote Command Execution vulnerability and learn how to exploit it.

CVE-2017-11610
Created 8 years ago
RCEFramework

S2-048 Remote Code Execution

Explore the S2-048 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-9791
Created 8 years ago
File UploadRCEMessage Queue

Apache ActiveMQ Arbitrary File Write

Explore the Apache ActiveMQ Arbitrary File Write vulnerability and learn how to exploit it.

CVE-2016-3088
Created 8 years ago
RCEFramework

S2-015 Remote Code Execution

Explore the S2-015 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2013-2134CVE-2013-2135
Created 8 years ago
RCE

Samba Remote Command Execution

Explore the Samba Remote Command Execution vulnerability and learn how to exploit it.

CVE-2017-7494
Created 8 years ago
RCE

GIT-SHELL Sandbox Bypass Leads to RCE

Explore the GIT-SHELL Sandbox Bypass Leads to RCE vulnerability and learn how to exploit it.

CVE-2017-8386
Created 8 years ago
RCEPath TraversalWebserver

WebLogic Weak Password, Arbitrary File Read and Remote Code Execution

Explore the WebLogic Weak Password, Arbitrary File Read and Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 8 years ago
RCE

PHP-CGI Remote Code Execution

Explore the PHP-CGI Remote Code Execution vulnerability and learn how to exploit it.

CVE-2012-1823
Created 8 years ago
RCE

Jenkins Remote Code Execution

Explore the Jenkins Remote Code Execution vulnerability and learn how to exploit it.

CVE-2017-1000353
Created 8 years ago
SSTIRCEFramework

Flask (Jinja2) Server-Side Template Injection

Explore the Flask (Jinja2) Server-Side Template Injection vulnerability and learn how to exploit it.

N/A
Created 8 years ago
RCEDeserialization

Python Unpickle Deserialization Remote Code Execution

Explore the Python Unpickle Deserialization Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 8 years ago
RCEFramework

S2-013 Remote Code Execution

Explore the S2-013 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2013-1966
Created 8 years ago
RCEExpression InjectionDatabase

ElasticSearch Groovy Sandbox Bypass and Remote Code Execution

Explore the ElasticSearch Groovy Sandbox Bypass and Remote Code Execution vulnerability and learn how to exploit it.

CVE-2015-1427
Created 8 years ago
RCEDatabase

ElasticSearch Remote Code Execution

Explore the ElasticSearch Remote Code Execution vulnerability and learn how to exploit it.

CVE-2014-3120
Created 8 years ago
RCEFramework

S2-012 Remote Code Execution

Explore the S2-012 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2013-1965
Created 8 years ago
RCEFramework

S2-009 Remote Code Execution

Explore the S2-009 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2011-3923
Created 8 years ago
RCEFramework

S2-008 Remote Code Execution

Explore the S2-008 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2012-0391
Created 8 years ago
RCEFramework

S2-007 Remote Code Execution

Explore the S2-007 Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 8 years ago
RCEFramework

S2-005 Remote Code Execution

Explore the S2-005 Remote Code Execution vulnerability and learn how to exploit it.

CVE-2010-1870
Created 8 years ago
RCEFramework

S2-001 Remote Code Execution

Explore the S2-001 Remote Code Execution vulnerability and learn how to exploit it.

N/A
Created 8 years ago