38050 matches found
CVE-2012-2982-Exploit-Script
CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin 🧠 Notes Payload defaults to a bas...
CVE-2024-36401-WoodpeckerPlugin
CVE-2024-36401-WoodpeckerPlugin Introducción Detección y explotación por lotes de CVE-2024-36401, con soporte para inyección personalizada de memory shell. 1. Detección por lotes 2. La URL ha sido filtrada en el backend solo hay que proporcionar la URL 3. Puede generar y personalizar memory shell...
CVE-2023-4220
RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...
powershell-reverse-tcp
PowerShell 反向 TCP 用于与远程主机通信的 PowerShell 脚本。 远程主机将完全控制客户端及所有底层系统命令。 基于以下方式的 Shell： Invoke-Expression PowerShell 命令 此处, 进程管道 此处. 已在 Windows 10 企业版操作系统（64 位）上的 PowerShell v5.1.19041.2673 中测试。 仅供教育目的。希望对你有所帮助！ 此仓库已开始出现已知签名，我没有时间每次都上传新脚本，因此你应该自行混淆这些脚本。 未来计划： 基于进程管道的更多 Shell，并进一步优化它们。 目录 如何运行 混淆...
CVE-2020-0910
CVE-2020-0910 PoC de Exploit Funcionando CVE-2020-0910 - Reverse Bind Shell Probado usando Python2.7 Para instalar: pip install -r requirements.txt Para ejecutar: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...
CVE-2024-28397-RCE
Script RCE CVE-2024-28397 Payload de reverse shell por defecto y argumento de comando opcional permitido el exploit funciona para js2py = v0.74 Requisitos Python 3.x Biblioteca requests pip install requests Listener de Netcat para reverse shell Ejemplo de uso Reverse shell: python exploit.py...
CLSA-2026-1790673243 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.10.0-tuxcare.1...
CVE-2025-39401
CVE-2025-39401 WordPress WPAMS Plugin WordPress WPAMS Plugin CVE: CVE-2025-39401 Base Score: 10.0 CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS lets attackers upload a web shell to the server, leading to full compromise. This affects WPAMS versions: from...
zyxel-p870hn-hardware-hacking
De un PCB desnudo a root: hardware-hacking de un ZyXEL P-870HN por UART Dos fotos de móvil de una placa de router sin etiquetar → consola serie → bypass de autenticación → shell root — reproduciendo la cadena real, aún sin parchear, CVE-2025-0890 cuenta supervisor oculta + CVE-2024-40891 inyecció...
CVE-2026-3300
CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...
CVE-2018-9276
CVE-2018-9276 CVE-2018-9276 PRTG 18.2.39 Reverse Shell Python3 support Dependancies Impacket python3 version Netcat Msfvenom Usage git clone https://github.com/A1vinSmith/CVE-2018-9276.git ./exploit.py -i targetIP -p targetPort --lhost hostIP --lport hostPort --user user --password pass 1. The...
CVE-2017-9544
CVE-2017-9544 Exploit for SEH based buffer overflow in Easy Chat Server CVE-2017-9544 Based on: pwntools msfvenom / reversetcp payload ropper x64dbg Vulnerable app available at https://www.exploit-db.com/exploits/42155 Setup Set victim IP to 192.168.15.100 and start Easy Chat Server. Set attacker...
CVE-2025-1302_jsonpath-plus_RCE
CVE-2025-1302 JSONPath-Plus PoC de RCE Nombre del script PoC: poc.py Un script de explotación de prueba de concepto para CVE-2025-1302, que apunta a una vulnerabilidad de RCE en la librería jsonpath-plus. Cuando se ejecuta contra un endpoint de servicio vulnerable, el script intenta desencadenar ...
CVE-2026-24061-PoC-Exploit
CVE-2026-24061 - GNU inetutils-telnetd Authentication Bypass Exploit GNU inetutils-telnetd Edition - CRLF Injection to Authentication Bypass & Instant Root Shell -Overview This exploit leverages CVE-2026-24061 , a critical remote authentication bypass vulnerability in GNU inetutils-telnetd. By...
BerrySentinel
🫐 Berry Sentinel Detector conductual de conexiones C2 Command & Control en tiempo real Zero-signature · Bulletproof Collection · Deep Scan · Kill Engine ¿Qué es? Berry Sentinel monitorea todas las conexiones de red activas en tu sistema y analiza el comportamiento de los procesos que las generan...
CVE-2025-60787
CVE-2025-60787 - Authenticated RCE in motionEye PoC for CVE-2025-60787 that is an Authenticated RCE vulnerability for motionEye with all afected versions up to 0.43.1b4 included. This is an automated PoC for the vulnerability described in this repository. Credits to prabhatverma47. Usage The scri...
CVE-2026-15410
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
aquos-r6-ghostlock
AQUOS R6 GhostLock root temporal Port específico del dispositivo de Linux 5.4 de GhostLock CVE-2026-43499 para el Sharp AQUOS R6. El objetivo validado es el SoftBank A101SH Judau ejecutando Android 11 build S0029 / 01.00.06, kernel 5.4.61-qgki. El objetivo ghostlock54 obtiene UID/GID 0 reales,...
Langflow-CVE-2025-3248-Multi-target
⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...