CVE-2022-24706

CVE-2022-24706 Contributors White Hat School 4th Batch 39th Class Geum Jeong-hyeon@junghyeonkum CouchDB Erlang Distribution Remote Command Execution Vulnerability CVE-2022-24706 Summary Apache CouchDB is an open-source document-oriented NoSQL database implemented in Erlang. Because Apache CouchDB...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

webuploader-0.1.15-Demo

webuploader-v-0.1.15 Component Has an Unauthorized File Upload Vulnerability Introduction: Baidu's WebUploader component has a file upload vulnerability. This vulnerability is caused by the upload page of the WebUploader component not strictly filtering file types or file extensions. Attackers ca...

Citrix-Virtual-Apps-XEN-Exploit

CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code execution See our blog post for technical details https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in Action python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoam...

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

CVE-2026-32996

CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit Installation • Usage • Running Paint2Die Installation Instructions git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Usage ./paint2die -h...

CVE-2025-50505

CVE-2025-50505 Unauthorized API Leads to Arbitrary Command Execution and Privilege Escalation in Clash Verge Rev Description The vulnerability stems from an unauthenticated API endpoint exposed by the clash-verge-service component, which is installed with elevated privileges by default. This flaw...

CVE-2022-22954

Multi-vulnerability trigger point detection, multi-threaded batch detection, command execution, file writing // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution python CVE-2022-22954.py -u https://x.x.x.x -c "id" // Write file python...

CVE-2025-48703

CVE-2025-48703 CVE-2025-48703 is a critical vulnerability in CentOS Web Panel CWP that allows unauthenticated attackers to perform remote code execution RCE by bypassing authentication and executing system commands. The vulnerability affects CWP versions 0.9.8.1204 and earlier, and has been patch...

CVE-2025-32433-Eploit

CVE-2025-32433-Eploit Erlang/OTP SSH Vulnerable to Pre-Authentication RCE SSH Erlang RCE Exploit crafting SSH payload to execute an arbitrary Erlang command on the vulnerable server. Usage: python3 exploit.py -t targets.txt -p 2222 -o results.log Disclaimer: This tool is for educational purposes...

cve-2020-11651-exp-plus

Use bash to execute the --exec parameter. The original script uses /bin/sh, so some commands are incompatible, such as bash reverse shell. 2. The original code retrieves the local salt-master version to determine if the remote host is affected, which is a clear logical error. I directly removed...

cve-2026-9558-poc

CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...

RedArrow

RedArrow3.2 - ThinkPHP 5.0.23 Remote Command Execution Tool User Guide 1. Tool Introduction RedArrow3.2 is a graphical tool for the ThinkPHP 5.0.23 remote command execution vulnerability, providing two main functions: single command execution and an interactive GodzillaShell-like interface. This...

F5-CVE-2022-1388-Exploit

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage Check against single host python3 CVE-2022-1388.py -v true -u targeturl Attack host and test command python CVE20221388.py -a true -u targeturl -c command Attack list of hosts python CVE20221388.py -s true -f file...

CVE-2026-58138

CVE-2026-58138 — Conductor 3.21.21..3.30.2 Unauthenticated Remote Code Execution Critical Remote Code Execution Vulnerability in Orkes Conductor 📋 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE vulnerability affecting Orkes Conductor versions 3.21.21 through 3.30....

PyShell

PyShell PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operati...

CVE-2022-22947-POC

CVE-2022-22947-POC CVE-2022-22947 batch detection script. The echo command is not regex-filtered. Please use it for now; I will update later. Place url.txt in the script directory. Directly run: python 脚本.py Demo: After the scan is complete, a success.txt file will be generated. This script will...

CVE-2024-55963

CVE‑2024‑55963 Appsmith RCE PoC PoC exploit for CVE‑2024‑55963 that runs arbitrary commands or spawns reverse shell on vulnerable Appsmith instances. It automatically handles both modern servers with the environmentId feature and much older “legacy” builds that pre‑date it, so you can use one...