CVE-2022-36804

CVE-2022-36804 The Bitbucket Server and Bitbucket Data Center components have a command injection vulnerability, according to information recently discovered by the Sangfor security team. An attacker can submit malicious HTTP requests to execute arbitrary code and eventually get access to the...

CVE-2007-2447_Samba_3.0.25rc3

CVE-2007-2447 'Username' map script' Command Execution 3.0.0 - 3.0.25rc3 3.0.20 - 3.0.25rc3 AMRIUNIX...

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...

CVE-2026-19938 Use-after-free of an ATT PDU buffer when signing an outgoing Bluetooth ATT Signed Write Command fails

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...

CVE-2026-19938

The Bluetooth host stack is vulnerable to a use-after-free and memory corruption in the ATT transmit path. Specifically, in subsys/bluetooth/host/att.c, the BT_ATT_OP_SIGNED_WRITE_CMD branch incorrectly calls net_buf_unref(buf) when bt_smp_sign() fails. This violates the established contract wher...

CVE-2026-19938 Use-after-free of an ATT PDU buffer when signing an outgoing Bluetooth ATT Signed Write Command fails

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...

CVE-2026-82108

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-82096

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2012-2982-Exploit-Script

CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin 🧠 Notes Payload defaults to a bas...

Centreon-20.04

CVE-2020-12688 - Authenticated RCE Centreon 20.04 minHelpCommand.php command name variable RCE CVE-2020-12688 Centreon Latest Release Documentation: https://docs.centreon.com/current/en/releases/centreon-core.html Discovered by: TheCyberGeek Date Discovered: 30/04/2020 Date Disclosed: 15/06/2020...

Webmin-CVE-2022-0824-Enhanced-Exploit

Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Webmin CVE-2022-0824 Enhanced Exploit Tool - Supports dual modes: command execution and reverse shell !IMPORTANT An enhanced exploit tool targeting Webmin CVE-2022-0824, supporting both direct command execution and reverse shell modes. 🚀 Features ✅...

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...

CVE-2025-69212_PoC

CVE-2025-69212: OpenSTAManager Proof of Concept PoC This repository contains a Proof of Concept PoC demonstrating the vulnerability identified as CVE-2025-69212 within OpenSTAManager, an OS Command Injection vulnerability caused by the P7M signed XML file decoding functionality. The versions...

CVE-2020-29607

Alienfader Exploit / Alien@shell Webshell Upload Exploit Description: This Python script exploits a file upload restriction bypass vulnerability in Pluck CMS e.g., versions prior to 4.7.13 to upload a PHP webshell. Once uploaded, the shell named "shell.phar" can be used to execute commands on the...

VulnerableSpringDataRest

Vulnerable Spring DataRest App This is an intentionally Spring Data REST Application to test and demostrate the CVE-2017-8046 vulnerability and the challenges of testing Command Injection and Remote Code Execution via REST apis It has support for Swagger UI to use with tools where Swagger...

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

CVE-2025-64446 PoC - FortiWeb Path Traversal Description Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb CVE-2025-64446 that allows execution of administrative commands. Technical Details CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

CVE-2026-48778

CVE-2026-48778 POC Notepad++ RCE via config.xml commandLineInterpreter Usage .\CVE-2026-48778.exe calc.exe Demo https://github.com/user-attachments/assets/79ec82c9-ab37-4923-b62d-325710095e86 Vulnerability Summary Package| Affected versions| Patched versions ---|---|--- Notepad++| = v8.9.6|...

CVE-2024-4577

Put the files to be scanned into urls.txt and then directly run POC.py Execute the command using EXP.py...

CVE-2026-82096 DataStage on Cloud Pak for Data Command Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82096 DataStage on Cloud Pak for Data Command Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...