CVE-2021-26828_ScadaBR_RCE

POC CVE-2021-26828ScadaBRRemoteCodeExecution ScadaBR 0.9.1 on Linux and through 1.0 and 1.12.4CE on Windows allows remote authenticated users to upload and execute arbitrary JSP files via 'viewedit.shtm' and Remote Code Execution. Exploit Usage Commands: Windows: $ sudo python WinScadaRCE.py Linu...

CVE-2022-1388-Exploit-POC

CVE-2022-1388 EXPLOIT POC F5 BIG IP POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,X-F5-Auth-Token Cache-Control: max-age=0 X-F5-Auth-Token: SherlockSecure Content-Type: application/json Authorization: Basic YWRtaW46aG9yaXpvbjM= "command":"run",...

CVE-2023-47437

CVE-2023-47437 Pachno Stored Cross-Site Scripting Vulnerability https://vulners.com/cve/CVE-2023-47437 Description: A vulnerability has been identified in Pachno allowing an authenticated attacker to execute a stored cross-site scripting XSS attack. Vulnerable forms: Comments Affected Versions:...

CVE-2025-6384

CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2024-23346

CVE-2024-23346 This PoC is based on the report/findings of William Khem-Marquez and Matthew Horton: https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f Usage: python3 CVE-2024-23346.py -t targetURL -u username -p password -l localhost -P localport -X -P and -X are...

CVE-2022-24654

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...

CVE-2022-40635

CVE-2022-40635: Groovy Sandbox Bypass in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2026-40083

SQL Injection in Cacti managers.php A proof-of-concept exploit for CVE-2026-40083, a SQL Injection vulnerability in Cacti's managers.php that allows any authenticated user with SNMP Manager permissions to read the entire MySQL database including user credentials and password hashes. Usage: Verify...

CVE-2025-40677

Exploit Title: Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677 Google Dork: inurl:"/MemberPages/quienesquien.aspx" Date: 09/22/2025 Exploit Author: Peter Gabaldon - https://pgj11.com/ Vendor Homepage: https://www.summar.es/ Software Link:...

CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File Write Path Traversal -orange 📋 Description CVE-2026-20262 is a Path Traversal CWE-22 vulnerability in the web interface of Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage. It allows an authenticated attacker with write permission...

CVE-2022-37202

CVE-2022-37202 CVE-2022-37202 POC Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. Vulnerability Type SQL Injection Vendor of Product the development group Affected Product Code Base https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Affected Component These interfaces...

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE Authenticated Exploit for the Remote Code Execution vulnerability in Webmin versions prior to 1.997, through the Software Package Updates module. How does it work? The Webmin Software Package Updates module does not properly sanitize the u parameter before passin...

TP-Link TL-WR840N - Command Injection

The TP-Link TL-WR840NESV6.20180709 router contains a command injection vulnerability in the oalsetIp6DefaultRoute component. This vulnerability allows authenticated attackers to execute arbitrary system commands, leading to complete device compromise. id: CVE-2022-25061 info: name: TP-Link...

CVE-2020-14295

CVE-2020-14295 CVE-2020-14295 proof of concept. The original post can be found at exploit-db. Install requirements python3 -m pip install -r requirements.txt Usage $ python3 cactisqlirce.py --help usage: cactisqlirce.py -h -t -u -p --lhost --lport Cacti 1.2.12 - SQL Injection / Remote Code...

CVE-2026-5415

CVE-2026-5415 CVE-2026-5415 WP Captcha PRO Authenticated Authentication Bypass Exploit...

WordPress-RCE-CVE-2019-8942

WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 Python3 implementation of the authenticated WordPress crop-image exploitation chain. The repository is organized around two independent workflows: a manual OSCP-style script and a fully automated script with an integrated reverse-shell...

CVE-2026-18223

Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, and 11.8.x

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE double-free → remote code execution Verified against Rocky Linux 8.10, aarch64, Redis 8.6.2, jemalloc 5.3.0. Reference: https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR; Stable exploit, works against variety of OS distro and architecture. Executive...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - SQL Injection Vulnerability in OpenEMR 8.0.0 Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 Authenticated RCE PoC This repository contains a proof-of-concept script created for security research and authorized penetration testing involving the vulnerability CVE-2025-2945 , affecting certain versions of pgAdmin4. The issue allows an authenticated pgAdmin user wit...