Cgi-bin_bash_Reverse

Cgi-binbashReverse POC for CVE-2014-6271 Src:https://gist.github.com/matjohn2/bc9689c60d4c9c5a2538...

cve-2021-41773

Apache 2.4.49 - Path Traversal or Remote Code Execution cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-41773 If CGI-BIN is enabled...

EUVD-2026-126031

A vulnerability was found in DrayTek Vigor2960 1.5.1.6. This issue affects the function checkfileexist of the file /cgi-bin/mainfunction.cgi of the component File Existence Check. Performing a manipulation of the argument uploadname results in heap-based buffer overflow. The attack may be initiat...

EUVD-2026-126018

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6. This vulnerability affects the function settable of the file /cgi-bin/mainfunction.cgi. Such manipulation of the argument jsondata leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the...

EUVD-2026-126014

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6. Affected by this issue is the function sub1E084 of the file /cgi-bin/mainfunction.cgi?action=doWebBackup. The manipulation of the argument option results in path traversal. It is possible to launch the attack remotely. The exploit is now...

EUVD-2026-126013

A security vulnerability has been detected in DrayTek Vigor2960 up to 1.5.1.6. Affected by this vulnerability is the function sub14914 of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument swmconfigupload leads to command injection. It is possible to initiate the attack remotely...

copyfail-deconstructed

copyfail-deconstructed Easy-to-understand version of CVE-2026-31431, a privilege escalation technique that allows anybody to become root. The original proof-of-concept is found here: https://github.com/theori-io/copy-fail-CVE-2026-31431, but is heavily compressed and minified so it can have as...

Bin-Finder

Description This tool looks for either the processes that have a certain binary loaded or the processes that don't. This is useful in the following scenarios: It allows to detect processes where an specific EDR/AV dll is not loaded. This could lead to EDR's exception detection. It allows to obtai...

CVE-2021-41773

CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

rifiuti2

Introduction Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat Remote Code Execution on Windows - CGI-BIN Apache Tomcat Remote Code Execution on Windows cgi-bin Usage: Usage: python CVE-2019-0232.py url cmd Test Environment: jdk8 apache-tomcat-8.5.39...

perf-exploiter

perf-exploiter CVE-2014-2630 In one of our recent penetration tests we have abused a vulnerability affecting a suid binary called "xglance-bin". Part of HP Performance Monitoring solution , it allowed us to escalate our local unprivileged sessions on some Linux RHEL 7.x/8.x systems to root. To be...

CVE-2021-41773

CVE-2021-41773 I have developed a POC of CVE-2021-41773 , RCE + cgi-bin path traversal NOTE : TESTED ON APACHE2 2.4.49 You can pulled vuln Apache2 2.4.49 directly from Docker $ sudo docker pull blueteamsteve/cve-2021-41773:no-cgid $ sudo docker run -dit -p 80:80 blueteamsteve/cve-2021-41773:no-cg...

apache-cve-2021-41773-lab

Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Usage Start the vulnerable server: ./apachelab.sh choose option 1 Manual exploit: curl --path-as-is...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

cve-2021-41773-and-cve-2021-42013

cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...

CVE-2024-22752

EaseUS MobiMover 6.0.5 Build 21620 - Insecure Files and Folders Permissions MobiMoverUILaunch.exe suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the executable file of the service with a binary of his choice under bin folder . The...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL required. If just URL given, it will RCE, else it...

EUVD-2026-125935

A vulnerability was identified in Tenda AC18 15.03.05.05multi/15.03.05.19 Build 6318. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/upgrade of the component Firmware Upgrade Handler. Such manipulation of the argument upgradeFile leads to insufficient verification...

CVE-2026-129258

The Tenda AC18 (firmware versions 15.03.05.05_multi/15.03.05.19 Build 6318 ) is vulnerable to an insufficient verification of data authenticity within the Firmware Upgrade Handler component. Specifically, manipulating the upgradeFile argument in the /cgi-bin/upgrade file allows for a remote attac...