CVE-2018-8174-exp

CVE-2018-8174EXP uso: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit para CVE-2018-8174 argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u URL, --url URL url del exploit -o OUTPUT, --output OUTPUT Archivo rtf de salida del exploit -i IP, --ip IP ip para netcat -...

CVE-2020-7247

CVE-2020-7247 This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtpmailaddr” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user How to use? python3 getShell.py If you need a reverse shell then run it...

Samba-CVE-2007-2447-Exploit

Exploit de Samba CVE-2007-2447 Este es un script de Python para explotar CVE-2007-2447, una vulnerabilidad conocida como ejecución de comandos del 'Username' map script en el servidor Samba. Descripción Este exploit está desarrollado para apuntar a las versiones de Samba 3.x - 4.x. CVE-2007-2447...

cve-2023-1671

Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack is a Perl script that calls /opt/ws/bin/sblistpack, which is another Perl script. The shell command arguments in it are enclosed in single quotes: $rc += system"$sblistpack '$uri' '$user'...

CVE-2025-27591

CVE-2025-27591 introducción below versiones v0.9.0 son vulnerables a una vulnerabilidad de escalada de privilegios local debido a que el programa crea un archivo de log escribible por todos, en lugar de un archivo de log escribible por todos; el atacante puede reemplazar el archivo de log con un...

CVE-2025-8088

POC para CVE 2025-8088 WinRAR -o...

CVE-2026-33017

My simple bash implementation of the CVE-2026-33017. Check following link for detailed explanation: https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx Use nc -lvnp PORT to receive the shall callback...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Prueba de Concepto Resumen Este repositorio contiene un script en Python que demuestra una prueba de concepto PoC del exploit para CVE-2023-38831. Este exploit aprovecha una vulnerabilidad en mecanismos específicos de procesamiento de archivos para ejecutar un payload de...

UBUNTU-CVE-2026-102422

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

CVE-2026-102422

shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...

CVE-2026-81780-Hash-Form

CVE-2026-81780-Hash-Form CVE-2026-81780 — Hash Form RCE The Vulnerability Unauthenticated file upload in WordPress Hash Form plugin ≤ 1.4.2. The plugin allows arbitrary file uploads without proper authentication or file type validation, leading to Remote Code Execution RCE. Exploit Chain Step...

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

CVE-2021-4034

CVE-2021-4034 Un día para el exploit de escalada de privilegios de polkit Solo ejecuta make, ./cve-2021-4034 y disfruta de tu shell de root. El aviso original de los autores reales está aquí PoC Si el exploit funciona, obtendrás una shell de root inmediatamente:...

webmin_1.920

CVE-2019-15107 Webmin 1.920 Ejecución Remota de Comandos Sin Autenticación Un script de python3 para la ejecución remota de comandos sin autenticación en Webmin 1.920 CVE-2019-15107 que crea una shell reversa o una shell pseudo interactiva usando mkfifo para evadir el firewall. Un script de pytho...

CVE-2026-62735

CVE-2026-62735 Information This vulnerability was originally discovered by Siyeon Wi. I reproduced the vulnerability independently for educational and case-study purposes. The vulnerability was also demonstrated at Pwn2Own Berlin 2026. References: TrendAI Zero Day Initiative status TrendAI Zero D...

Fu3l-F1lt3r

|\ \ |\ |\ |\ \ |\ / |\ \ |\ \ |\ \ \ \ /\ \ \\ ||\ /\ \ \ \ \ /|/|\ \ \ \| \ \||\ /\ \ |\ \ \ \ \ \ \\ \ |\ \ \ \ \ \ |/ \ \ \ \ \ \ \ \ |\ \ \ \ \ \ | \ \ \\ \ \ \ \ \ \ \ | \ \ \ \ \ \ \ \ \ \ \ | \ \ \ \|\ \ \ \ \ \ \ \ |\ \\ \ || |||||| || ||||||...

CVE-2026-24061-setup

CVE-2026-24061 Setup This repository contains the Docker setup for CVE-2026-24061. Once you have installed Docker, just do the following: 1. Clone this repository. 2. Run the following command: sudo docker build . --tag telnetd-auth-bypass 3. Once the docker image is built, we can start the...

CVE-2026-18747 Integer underflow of net_buf length in the MCUmgr serial (SMP over console) transport leads to out-of-bounds read

The MCUmgr SMP-over-console transport decodes a base64 frame, reads a 16-bit packet length from it, verifies a CRC and then unconditionally strips the trailing CRC with rxctxt-nb-len -= 2U; in mcumgrserialprocessfrag subsys/mgmt/mcumgr/transport/src/serialutil.c. mcumgrserialextractlen accepted a...

shellshock-shell

shellshock-shell Un sencillo exploit en forma de shell de Python para el fallo Shellshock CVE-2014-6271. Úselo para explotar URLs vulnerables conocidas. Esta herramienta solo debe utilizarse en URLs que estén autorizadas. El autor de esta herramienta no se hace responsable de su uso. Nombre del...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interactiva secuestro HTTP + POST + AES-256-CBC/BASE64 Detección -dnslog Detección sin salida de DNSLog Nuclei -poc Detección de eco de vulnerabilidad Explotación -exp Shell interactiva eco base64 -exp2 Shell interactiva secuestro HTTP + POST +...