ZeroShell <= 1.0beta11 Remote Code Execution

ZeroShell 1.0beta11 and earlier via cgi-bin/kerbynet allows remote attackers to execute arbitrary commands through shell metacharacters in the type parameter in a NoAuthREQ x509List action. id: CVE-2009-0545 info: name: ZeroShell = 1.0beta11 Remote Code Execution author: geeknik severity: critica...

Western Digital MyCloud NAS - Authentication Bypass

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

CVE-2021-42013

CVE-2021-42013 Vulnerable service Installation Several options: 1. Docker container root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd...

CVE-2021-41773

CVE-2021-41773 Vulnerable service Installation Several options: 1. Docker container root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd...

bash-CVE-2017-17562

bash-CVE-2017-17562 An PoC implementation in Bash for CVE-2017-17562. Requires curl for crafting HTTP requests. Based on Metasploit and @fssecur3 implementations. Arguments The following arguments need to be set as they are required for reconnaissance + payload send: root@kitploit: $1: IP/Host of...

CVE-2024-4577

CVE-2024-4577 PHP CGI Remote Code Execution Exploit Author: Byte Reaper CVE: CVE-2024-4577 Category: Web Exploitation Target Versions: PHP CGI 8.1, 8.2, 8.3 Target OS: Windows MIT...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution RCE and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit...

CVE-2021-41773

CVE-2021-41773 apache http server vulnerability only works 2.4.49 requirement settings httpd.conf root@kitploit: ... LoadModule cgimodule modules/modcgi.so uncomment this line ... AllowOverride none Require all denied comment out this line or set Require all granted ... References...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Author Mohammed Idrees Banyamer 📍 Country: Jordan 📸 Instagram: @banyamersecurity Proof-of-Concept exploit for CVE-2026-26235 - Unauthenticated Denial of Service via missing authentication in JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Vulnerability Description CVE-2026-26235 is an unauthenticated...

CVE-2021-41773-exercise

CVE-2021-41773-exercise A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by...

apache-cve-2021-41773-lab

Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Usage Start the vulnerable server: root@kitploit: ./apachelab.sh choose option 1 Manual exploit:...

poc-yaws-cgi-shell-injection

OS command injection in Yaws web server CVE-2020-24916 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:shell-injection-appmod-cgi root@kitploit: curl...

webcgi-exploits

Web CGI Exploits Here's several exploits related to different web CGIs. I wrote those exploits in last few years. How it works Web app are basicly those layers: 1. applications 2. web frameworks 3. script language engines 4. web containersservers 5. web front proxynginx etc. 4 and 5 could be the...

dlink-dir-819-dos

CVE-2022-40946 Exploit: Unauthenticated Denial of Service in DLink consumer DIR 819 A1 routers Exploit Fetch the sources root@kitploit: $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Run the exploit root@kitploit: $ ./exploit....

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...

CVE-2021-41773-apache

CVE-2021-41773 Apache HTTP Server Exploit This repository contains a Python-based proof-of-concept exploit for the Apache HTTP Server path traversal vulnerability identified as CVE-2021-41773. The script is designed for security research, defensive testing, and authorized evaluations of vulnerabl...

Rainstorm

================================================================================================ BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License :...

CVE-2024-4577-LetsDefend-walkthrough

Incident Response Walkthrough: Mitigating a Zero-Day Attack CVE-2024-4577 LetsDefend Write-up PHP-CGI CVE-2024–4577 Scenario: Our Intrusion Detection System IDS and Intrusion Prevention System IPS identified a potential attack targeting a critical system component at 12:05 PM UTC. This write-up...

docker_CVE-2014-6271.

dockerCVE-2014-6271. 1. docker build -t DOCKERIMAGENAME /path/to/dockerfiledirectory 2. docker run -it -d -p 8080:80 DOCKERIMAGENAME 3. verify execution with: docker ps 4. verify web server execution: http://localhost:8080 5. exploit vulnerability : curl -H "user-agent: :; ; echo; echo; /bin/bash...