cve-2020-11651-exp-plus

Use bash to execute the --exec parameter. The original script uses /bin/sh, so some commands are incompatible, such as bash reverse shell. 2. The original code retrieves the local salt-master version to determine if the remote host is affected, which is a clear logical error. I directly removed...

SCShell

SCShell SCShell is a fileless lateral movement tool that relies on ChangeServiceConfigA to run commands. The beauty of this tool is that it does not perform authentication against SMB. Everything is performed over DCERPC. The utility can be used remotely WITHOUT registering a service or creating ...

MSSqlPwner

MSSqlPwner MSSqlPwner is an advanced and versatile pentesting tool designed to seamlessly interact and pwn MSSQL servers. That tool is based on impacket, which allows attackers to authenticate to databases using clear-text passwords NTLM Hashes, and kerberos tickets. With MSSqlPwner, users can...

CVE-2026-110005

The Komodo version 2.2.0 platform contains an OS command injection vulnerability within the periphery agent's container-management functionality. An authenticated low-privileged user possessing Execute or Read plus Logs permissions on a managed server can exploit the DestroyContainer or SearchCon...

CVE-2026-86022

The note-taking platform VNote (prior to version 4.3.0 ) is vulnerable to argument injection leading to arbitrary command execution. The root cause lies in SessionConfig::ExternalProgram::fetchCommand, which wraps a note path in double quotes before passing it to QProcess::start(const QString&) v...

CVE-2026-55601

The log monitoring utility MultiTail (version 7.1.5 and earlier ) is vulnerable to a shell injection flaw within its -ex and -eX execute-on-match features. The root cause lies in the check_filter_exec() function in mt.c, which passes a constructed command—containing unsafely escaped attacker-cont...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...

CVE-2026-48030

CVE-2026-48030 — OS Command Injection in Pheditor Overview Field| Details ---|--- CVE ID| CVE-2026-48030 Product| pheditor Vendor| Hamid Samak Affected Versions| 2.0.1, 2.0.2, 2.0.3 Patched Version| 2.0.4 Severity| Critical CVSS Score| 9.9 CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H...

CVE-2025-49619

CVE-2025-49619 PoC This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener nc -lvnp 2. Run the exploit python3 exploit.py -u "http://:" -k "" -i -p : Skyvern server IP : Skyvern server port : Your...

CVE-2018-6574

CVE-2018-6574 Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow go get remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. from mitre RCE command The...

spring4shell-CVE-2022-22965

Simple Spring4Shell POC Check if endpoint is vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Exploit vulnerable endpoint python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Execute command on uploaded webshe...

CVE-2025-29306-PoC-FoxCMS-RCE

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit A Python exploit for CVE-2025-29306, a remote code execution vulnerability in FoxCMS. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability Multi-threaded for fast scanni...

Log4J-CVE-2021-44228-RCE

Log4J CVE-2021-44228 Exploit with Command Execution Interactive exploit, just run: ./exploit.sh...

CVE-2021-31805

CVE-2021-31805 1.Introduction Struts2 Remote Command Execution Vulnerability CVE-2020-17530 & CVE-2021-31805 POC & EXP 2.Usage Parameter Introduction -u target url -m dnslog|exp //Default echo interface character check -n s2-062 //Default s2-061 -s windows //Default linux -p vulnerable parameter...

CVE-2019-9193

EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in specific versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server that is vulnerable to CVE-2019-9193. Features...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated Install Grab Repo $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Setup Note: Install the latest version of node $ npm init $ npm i axios cheerio yargs Usage ┌─✗─v37r1x@7h3B14ckKn1gh75─/Documents/Code/CVE-2023-26035 └──╼ $nod...

CVE-2017-1000117

CVE-2017-1000117 usage $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git when git has problem, ifconfig is executed...

wmiexec-Pro

wmiexec-Pro New generation of wmiexec.py. Table of Contents 1. Info 2. Special thanks 3. Features 4. Getting Started Installation 5. Usage 6. Screenshots 7. How it works? 8. Disclaimer 9. References Info The new generation of wmiexec.py, more new features, whole the operations only work with port...

StrutsShell

StrutsShell Apache Struts CVE-2017-5638 Shell Introduction The "LowNoiseHG LNHG Struts Shell " "StrutsShell " from now on was conceived in March 2017 after realizing the usefulness of not having to exploit Apache Struts CVE-2017-5638 manually HTTP GET requests by hand and after realizing the...

PyShell

PyShell PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operati...