CVE-2012-2982-Exploit-Script

CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin 🧠 Notes Payload defaults to a bas...

CVE-2024-36401-WoodpeckerPlugin

CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

CVE-2020-0910

CVE-2020-0910 Working Exploit PoC CVE-2020-0910 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

CVE-2024-28397-RCE

CVE-2024-28397 RCE Script Default reverse shell payload and optional command argument allowed exploit works for js2py = v0.74 Requirements Python 3.x requests library pip install requests Netcat listener for reverse shell Example usage Reverse shell: python exploit.py 10.129.227.108 /runcode...

CLSA-2026-1790673243 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.10.0-tuxcare.1...

CVE-2025-39401

CVE-2025-39401 WordPress WPAMS Plugin WordPress WPAMS Plugin CVE: CVE-2025-39401 Base Score: 10.0 CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS lets attackers upload a web shell to the server, leading to full compromise. This affects WPAMS versions: from...

zyxel-p870hn-hardware-hacking

From a bare PCB to root: hardware-hacking a ZyXEL P-870HN over UART Two phone photos of an unlabeled router board → serial console → auth bypass → root shell — reproducing the real, still-unpatched chain CVE-2025-0890 hidden supervisor account + CVE-2024-40891 CLI command injection on hardware I...

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...

CVE-2018-9276

CVE-2018-9276 CVE-2018-9276 PRTG 18.2.39 Reverse Shell Python3 support Dependancies Impacket python3 version Netcat Msfvenom Usage git clone https://github.com/A1vinSmith/CVE-2018-9276.git ./exploit.py -i targetIP -p targetPort --lhost hostIP --lport hostPort --user user --password pass 1. The...

CVE-2017-9544

CVE-2017-9544 Exploit for SEH based buffer overflow in Easy Chat Server CVE-2017-9544 Based on: pwntools msfvenom / reversetcp payload ropper x64dbg Vulnerable app available at https://www.exploit-db.com/exploits/42155 Setup Set victim IP to 192.168.15.100 and start Easy Chat Server. Set attacker...

CVE-2025-1302_jsonpath-plus_RCE

CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: poc.py A proof-of-concept exploit script for CVE-2025-1302, which targets an RCE vulnerability in the jsonpath-plus library. When run against a vulnerable service endpoint, the script attempts to trigger remote code execution via a JSONPath...

CVE-2026-15410

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

aquos-r6-ghostlock

AQUOS R6 GhostLock root temporal Port específico del dispositivo de Linux 5.4 de GhostLock CVE-2026-43499 para el Sharp AQUOS R6. El objetivo validado es el SoftBank A101SH Judau ejecutando Android 11 build S0029 / 01.00.06, kernel 5.4.61-qgki. El objetivo ghostlock54 obtiene UID/GID 0 reales,...

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...

CVE-2022-22947

Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

CVE-2021-21315

the CVE-2021-21315's exploit code wrote with Rust lang I'm rust noob so this code was my part of RustLang practices Yes!!Let's Get the reverse shell!!!!!!!!!! !for education or researching only Build cargo build Usage ./exploit ./exploit http://target.com/api/osinfo?param 172.17.2.1 1234 need...

CVE-2007-2447

CVE-2007-2447 Samba Exploit A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian. Vulnerability Description CVE-2007-2447 is a command injection vulnerability in Samba versions 3.0.0 through 3.0.25rc3. The vulnerability exists in the SamrChangePassword...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...