CVE-2022-46169

CVE-2022-46169 - Unauthenticated Remote Code Execution in Cacti What is Cacti and its vulnerability? Cacti is an open-source operational monitoring tool written in PHP, MySQL/MariaDB, which provides a friendly interface. The vulnerability was found in 2022 which affected all versions before 1.2.2...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - Remote Command Execution CVE-2014-6287 🚨 About the Exploit This is a proof-of-concept exploit for the well-known Remote Command Execution vulnerability in Rejetto HttpFileServer HFS v2.3.x , identified as CVE-2014-6287. By abusing the vulnerable search functionality...

CVE-2026-47323

camel-cxf-rest / camel-cxf / camel-knative-http Header Injection Reproducer CVE-2026-47323 This project demonstrates a message-header injection in Apache Camel's CXF and Knative HTTP header-filter strategies, tracked as CVE-2026-47323. CxfRsHeaderFilterStrategy camel-cxf-rest,...

RE11S_1.11-formAccept-CommandInjection

RE11S1.11-formAccept-CommandInjection During my internship at Qi An Xin Tiangong Lab, I discovered a command injection vulnerability in the RE11S1.11 router. By analyzing the webs file in the bin directory, I found that the function formAccept contains a command injection vulnerability. The...

CVE-2024-3121

CVE-2024-3121 - Remote Code Execution RCE in parisneo/lollms Discovered by: Syed Jan Muhammad Zaidi GitHub: dark-ninja10 CVE ID: CVE-2024-3121 Repository Affected: parisneo/lollms 🧨 Vulnerability Summary A Remote Code Execution RCE vulnerability exists in the createcondaenv function of the lollms...

CVE-2019-15107

CVE-2019-15107 Python Exploit The exploit for CVE-2019-15107 webmin Acknowledgments Based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. nc -lnvp 1234 Change the attacker ip to your ip and port. Also create a...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 Detection Artifact Generator for Citrix NetScaler CVE-2026-88771 See our blog post for technical details. Detection in Action ./watchTowr-vs-Citrix-Netscaler-CVE-2026-88771.py --target https://netscaler.local/ --command 'id/var/tmp/watchTowr' / | | |\ ...

slmail-exploit

These Python scripts are for educational purposes only! ⚫ Example of use: python exploit.py 192.168.0.100 ip victm DO NOT FORGET TO OPEN THE DOOR IN YOUR MACHINE...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 Meta-Command Filter Command Execution Summary The PLAIN restore meta-command filter introduced in pgAdmin as part of the fix for Issue 9320 does not detect meta-commands when a SQL file begins with a UTF-8 Byte Order Mark EF BB BF or other special sequences. The implemented filter...

CVE-2021-32159

..| CSRFtoCommandInjection1 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Command Injection through the Webmin's Upload and Download feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Command Execution eXploit's...

CVE-2019-12725

CVE-2019-12725 ZeroShell has a command execution vulnerability that allows attackers to execute arbitrary commands Tool Usage python3 CVE-2019-12725.py -u http://127.0.0.1:1111 Single URL test python3 CVE-2019-12725.py -c http://127.0.0.1:1111 cmdshell mode python3 CVE-2019-12725.py -f url.txt...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd 3.2.8.1 Backdoor Command Execution UnrealIRCd 3.2.8.1 backdoor command execution exploit in Python 3 CVE-2010-2075. Description UnrealIRCd version 3.2.8.1 contains a trojan horse which allows remote attackers to execute arbitrary commands CVE-2010-2075. I referenced the Metasploit...

CVE-2022-42889

Quickstart sudo apt install golang To run like Python: go run main.go arg1 arg2 To build executable: go build main.go Usage: non@woa:/program$ go run main.go - Usage: ./program vulnerable/web?param= 'ls -la' To Do: Reverse shell capabilities https://gobyexample.com/spawning-processes Better error...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 python CVE-2022-46169.py tageturl...

CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

CVE-2023-30990

CVE-2023-30990 exploits See our blog post for details: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ The Python scripts require the ebcdic module: pip install ebcdic DRDA S38CMD method python3 ddm.py "" DRDA SQL method python3 ddm-bypass-test.py "" Simple bindshell with...