CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Usage Reverse shell listener with Ncat root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft...

SmileySploit

SmileySploit A basic script that exploits CVE-2011-2523 Overview In 2011, an integrated backdoor was found on vsFTPd servers running version 2.3.4, in which using a smiley emoticon ":" triggers a reverse connection to an attacker. With this, it is extremely easy to create an exploit script and ga...

CVE-2024-32002

CVE-2024-32002 A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002 This is still in the testing phase and I will update it once done...

CVE-2024-37085

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors. Download ESXIVORTEX Details: an authentication bypass which leads to shell upload in context of vpxuser leading to full administrative permission on domain-joined ESXI hypervisors. in order to...

CVE-2024-22274

CVE-2024-22274 Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123" then spawn ssh with root shell. Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64...

CVE-2026-9277

CVE-2026-9277 - Shell-Quote Command Injection Exploit A specialized Proof of Concept PoC exploit script designed to verify and demonstrate CVE-2026-9277 —a structural Command Injection vulnerability found in legacy versions of the shell-quote library = 1.8.3. The scanner performs deep structural...

CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - Remote Authentication Bypass A security research tool for exploiting CVE-2026-24061, a critical remote authentication bypass vulnerability in GNU inetutils-telnetd that allows instant root shell access without authentication. Table of Contents Vulnerability...

CVE-2025-55182-React2Shell-RCE-Shell

‼️ CVE-2025-55182 Pwn React2Shell Exploit RCE con Shell Interactiva y Explotación Masiva Este repositorio proporciona una prueba de concepto funcional para CVE-2025-55182, un RCE que afecta algunas implementaciones de Next.js. La herramienta abre un símbolo de shell interactivo al explotar,...

CVE-2026-29041

CVE-2026-29041 — RCE autenticado mediante carga de archivos sin restricciones en Chamilo LMS 1.11.32 -yellow?style=for-the-badge Ejecución remota de código autenticada en Chamilo LMS 1.11.32 mediante una validación incorrecta de la carga de archivos en el endpoint AJAX ckuploadimage. Un estudiant...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID. This vulnerability affects Android versions from 9 to 14 running on security patch level 2024-06-01 or lower. A support matrix of tested devices can b...

DIRTYFAIL

DIRTYFAIL Un detector unificado y un banco de pruebas de PoC para las familias de vulnerabilidades de escritura en caché de páginas de Linux Copy Fail y Dirty Frag. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║...

CVE-2026-22241

CVE-2026-22241 Lab Environment for CVE-2026-22241 Vulnerability Description: Vulnerability: Unrestricted Upload of File with Dangerous Type. Impact: Remote Code Execution RCE. Description: This flaw allows an attacker with administrative privileges to upload a malicious PHP file Web Shell, leadin...

React2Shell

React2Shell /$$$$$$$ /$$ /$$$$$$ /$$$$$$ /$$ /$$ /$$ | $$ $$ | $$ /$$ $$ /$$ $$| $$ | $$| $$ | $$ \ $$ /$$$$$$ /$$$$$$ /$$$$$$$ /$$$$$$ |/ \ $$| $$ /| $$$$$$$ /$$$$$$ | $$| $$ | $$$$$$$/ /$$ $$ | $$ /$$/| $$/ /$$$$$$/| $$$$$$ | $$ $$ /$$ $$| $$| $$ | $$ $$| $$$$$$$$ /$$$$$$$| $$ | $$ /$$/ \ $$| $...

CVE-2023-38646

CVE-2023-38646 - Metabase Pre-Auth RCE ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author securezeron Step Guides 1. Set Up the Listener on your attacker machine: nc -nlvp 4444 2. Then, run this command: python3...

CVE-2021-41773-Apache-2.4.49-

CVE-2021-41773-Apache-2.4.49- Penetration testing 1.1. Path Traversal Read /etc/passwd file !/bin/bash Script: exploitpathtraversal.sh Objective: Read /etc/passwd file from Apache 2.4.49 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ Exploiting...

CVE-2023-38646

Metabase Pre-Auth RCE POC - CVE-2023-38646 Metabase de código abierto anterior a 0.46.6.1 y Metabase Enterprise anterior a 1.46.6.1 permiten a los atacantes ejecutar comandos arbitrarios en el servidor. He escrito el script directamente para obtener una reverse shell en la máquina del atacante. U...

CVE-2012-2982_python

CVE-2012-2982 Exploit python Hello, I am a security researcher and this is my first exploit. Webmin 1.580 has a RCE which is also CVE-2012-2982 To use This payload: 1. download 2. Open in text editor! 3. change targetIP to your target 4. change lhost to your own ip 5. change lport to the port...

CVE-2017-12149

CVE-2017-12149 Muchas gracias al maestro yunxu1 por el código fuente Descripción: Se eliminó la interfaz gráfica Se corrigió el fallo en la ejecución de comandos causado por errores en la identificación del sistema Se cambió a un shell interactivo Uso Introduce la URL y pulsa Enter; automáticamen...

oracleShell

oracleShell ejecución de comandos en base de datos Oracle Entorno de prueba - privilegios DBA: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1....

CVE-2026-34197

Laboratorio ActiveMQ Classic CVE-2026-34197 Este repositorio contiene un laboratorio local para estudiar CVE-2026-34197 en Apache ActiveMQ Classic y para comparar una instancia vulnerable con una compilación parcheada. El repositorio está organizado para respaldar dos objetivos: Reproducir el...