Confluence-RCE

Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy For communication and learning purposes only...

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

cve-2022-42475

FortiOS SSL-VPN buffer overflow vulnerability cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version...

CVE-2026-48711

A flaw was found in SSHFS, a network filesystem client. An attacker can exploit this vulnerability by providing a specially crafted mount source that includes argument delimiters. This improper handling of the mount source allows for argument injection, leading to the execution of arbitrary...

CVE-2019-11043

PoC CVE-2019-11043 A Python version of the CVE-2019-11043 exploit https://github.com/neex/phuip-fpizdam This PoC is still a draft, please use the exploit written by @neex Vulnerability Analysis: https://paper.seebug.org/1064/ PoC Setup Just run docker compose to bring up nginx and php-fpm:...

CVE-2018-10517

CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: 1. CMS Made Simple URL endpoint; 2. Cookie...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...

CVE-202122986-EXP

F5 BIG-IP Remote Command Execution Vulnerability CVE-2021-22986 Affected Versions F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC POST /mgmt/tm/util/bash HTTP/1.1...

cve-2025-49844

CVE-2025-49844 Mi prueba de concepto personal para CVE-2025-49844, también conocido como RediShell. Compilaciones de destino compatibles: Linux x86-64, imagen Docker redis:8.2.1-alpine Linux x86-64, imagen Docker redis:8.2.1-bookworm Es un poco torpe, probablemente no tan bueno como el de Wiz...

winrar_CVE-2023-38831_lazy_poc

winrarCVE-2023-38831lazypoc lazy way to create CVE-2023-38831 winrar file for testing Article that mentioned this vuln and the sample: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ version of winrar i was using is winrar 5.91.0 I took a malicious winrar file...

CVE-2024-38856-EXP

CVE-2024-38856-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt or nuclei -id CVE-2024-23692 -o CVE-2024-23692-result.txt...

CVE-2018-1000006-DEMO

CVE-2018-1000006-DEMO The Demo for CVE-2018-1000006 Analysis Electron v1.8.2-beta.4 Remote Command Execution Vulnerability —【CVE-2018-1000006】 POC You can directly use elecrce\elecrce-win32-x64\elecrce.exe You can also package it yourself into an exe application to generate a vulnerable version...

CVE-2022-30023

CVE-2022-30023 Authenticated Command Injection on Tenda HG9 Router Usage git clone https://github.com/Haniwa0x01/CVE-2022-30023 cd CVE-2022-30023 python exploit.py -u http://target -U "user" -P "password" Example pc@pc-note:/CVE-2022-30023/$ python3 exploit.py -u "http://10.0.0.1" -U "admin" -P...

SpringFramework_CVE-2022-22965_RCE

SpringFrameworkCVE-2022-22965RCE Vulnerabilidad de ejecución remota de código en SpringFramework CVE-2022-22965 Entorno de reproducción de la vulnerabilidad docker pull vulfocus/spring-core-rce-2022-03-29 docker run -d -p 8090:8080 --name springrce -it vulfocus/spring-core-rce-2022-03-29 Escribir...

CVE-2022-22947

SpringCloud-Gateway Command Execution Vulnerability CVE-2022-22947 Environment Setup Method 1: Clone the ready environment code from GitHub. GitHub Repository //⚠️Note: The environment code download path must not contain Chinese characters or spaces git clone...

MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...

CVE-2018-0802_CVE-2017-11882

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 and 1.7.x=1.7.2p4 Local Privilege Escalation Sudo su "do" allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Vulnerable environment To setup a vulnerable environment f...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...

CVE-2023-20273

CVE-2023-20273 CVE-2023-20273 Exploit PoC Usage usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h, --help show this...