wp2shell

wp2shell Pre-authentication Remote Code Execution against WordPress Core. Chains CVE-2026-60137 SQLi in authornotin / authorexclude parameter of WPQuery with CVE-2026-63030 REST API batch-route confusion for unauthenticated RCE. Affected Versions Range| Status ---|--- = 6.8.5| Not affected no bat...

wp2shell

wp2shell by: ek0ms savi0r Unauthenticated Remote Code Execution for WordPress Core POC CVE-2026-63030 + CVE-2026-60137 wp2shell exploit for a critical vulnerability chain in WordPress core. It chains a REST API batch route confusion bug with an SQL injection in WPQuery to achieve unauthenticated...

cve-2022-29464

cve-2022-29464 cve-2022-29464 Batch Script Referenced the exploit by MzzdToT master, wrote a cve-2022-29464 batch detection script python3 rce.py -f file.txt...

Vite-CVE-2025-30208-Scanner

An automated tool for detecting Vite CVE-2025-30208 vulnerability, supporting batch scanning and result saving. Features ✅ Colored terminal output ✅ Batch target scanning file import supported ✅ Multi-threaded concurrent detection adjustable thread count ✅ Automatic saving of vulnerability result...

CVE-2022-22965

CVE-2022-22965 Poc&Exp, supports batch scanning Usage -a string Reverse listening address -b Whether to display banner default true -c string Command default "ls" -p int Reverse listening port -poc Whether to only perform POC scan, default scan only POC default true -r Whether to reverse shell...

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995Batchscanningexp last 2018-8-9 Batch scanning script for DVR based on CVE-2018-9995 vulnerability Original exploit script for CVE-2018-9995 Original code Environmental preparation python3, ubuntu user@ubuntu:$ sudo pip3 install grequests user@ubuntu:$ sudo pip3 install tableprint Usa...

CVE-2020-10148

Uso y descargo de responsabilidad Este script es una herramienta de detección por lotes para la vulnerabilidad de ejecución remota de código en la API de SolarWinds Orion CVE-2020-10148. Uso: Python CVE-2020-10148.py urls.txt Cada URL en urls.txt debe estar en una línea. Las direcciones vulnerabl...

CVE-2022-26134

CVE-2022-26134 Atlassian Confluence Remote Code Execution Vulnerability CVE-2022-26134 Usage: python CVE-2022-26134.py -u http://127.0.0.1 Batch verification: python CVE-2022-26134.py -f xxx.txt copy URL to txt...

CVE-2020-14883

CVE-2020-14883 Script de detección masiva de vulnerabilidad de omisión de autenticación de Weblogic Método de uso: Python CVE-2020-14883-Multiple.py ip.txt port Las direcciones vulnerables se generarán en Vul.txt...

CVE-2022-24112_POC

POC Collected POCs CVE-2022-24112 To set up the Chunqiu Cloud Environment: CVE-2022-24112 target environment, two POCs were modified, slightly adapted from the POCs of M4xSec and twseptian for the Chunqiu Cloud Environment: Chunqiu Cloud Environment: CVE-2022-24112: Apache APISIX is a cloud-nativ...

wp2shell-poc

wp2shell 💙 Support the Project If you appreciate my work, consider supporting the project via USDT TRC20: TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN WordPress Core Pre-Authentication RCE Chain wp2shell is a security research Proof-of-Concept demonstrating a pre-authentication vulnerability chain in...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit Proof of Concept tool for extracting users and password hashes via the CVE-2026-63030 wp2shell vulnerability. Vulnerability Information CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 Type : Pre-Auth...

CVE-2026-63030-WP2Shell

CVE-2026-63030 | WP2Shell xpl0ited by gr1tx WP2Shell is a Python-based Proof-of-Concept PoC for CVE-2026-63030. It performs time-based vulnerability verification against the WordPress Batch API and generates detailed HTML and JSON reports. The project is intended for authorized security...

WP2Shell

WP2Shell - CVE-2026-63030 / CVE-2026-60137 WordPress REST API Batch SQL Injection to RCE Full discovery and exploitation tool for WordPress REST API Batch endpoint vulnerability. This tool exploits a critical SQL injection vulnerability in the WordPress REST API /wp-json/batch/v1 endpoint, allowi...

CVE-2020-8209

Usage and Disclaimer This script is a batch detection script for the Citrix XenMobile directory traversal vulnerability CVE-2020-8209. Usage: Python CVE-2020-8209-Multiple.py url.txt The vulnerable addresses are output in vul.txt Affected Versions: Citrix XenMobile Server 10.12 before RP2 Citrix...

wp2shell

CVE-2026-63030 + CVE-2026-60137 - 「wp2shell」: WordPress コアにおける未認証 RCE REST API の バッチルート混同 CVE-2026-63030 と WPQuery authornotin SQL インジェクション CVE-2026-60137 を連鎖させ、デフォルトの WordPress インストールに対する 事前認証リモートコード実行 を実現します。 発見者: Adam Kues Assetnote / Searchlight Cyber、2026-07-17 公開。 アドバイザリ: GHSA-ff9f-jf42-662...

CVE-2021-22005-

CVE-2021-22005- CVE-2021-22005 script de python para verificación por lotes Entorno de ejecución: python3 Ejecución: coloque las URLs a verificar en un archivo de texto, por ejemplo url.txt, luego ejecute python3 url.txt...

Apache-APISIX-CVE-2022-24112

Apache APISIX Remote Code Execution CVE-2022-24112 Exploit Summary An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key w...

f5_rce_poc

Usage python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates: Fixed some command execution...

spring4shell_behinder

Spring4shellbehinder ¿Qué es esto? Una herramienta de explotación rápida y en lote para la vulnerabilidad Spring4Shell CVE-2022-22965 Contribuyentes 4nth0ny @星期五实验室 Bienvenidos a enviar issues/pr : Entorno python 3.x Behinder3.0 Beta9 Instalación python3 -m pip install -r requirements.txt Uso...