Exploit for OS Command Injection in Asus Rt-Ax55_Firmware

CVE-2023-39780 — ASUS RT-AX55: command injection в qosbwrul...

Exploit for CVE-2014-8361

CVE-2014-8361 — Realtek SDK miniigdSOAP: RCE через UPnP Лабор...

CVE-2026-93349-frictionless-command-injection

CVE-2026-93349: Frictionless = 5.20.0rc1 explore OS Command Injection Severity: High, CVSS 3.1 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: all Frictionless versions = 5.20.0rc1 Component: frictionless.console.commands.explore CWE: CWE-78 OS Command Injection, CWE-20 Imprope...

ci_fuzz

Description: This script fuzz's for Command Injection vulnerabilities resulting in remote command execution. Similiar OWASP vulnerablities are explained here -- https://www.owasp.org/index.php/CommandInjection The script will attempt to execute OS commands by injecting into every value in the bod...

eximrce-CVE-2019-10149

eximrce Simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /root/lweximtest. Output will be slow depending on server's reply and not knowing how to properly use python's socket module. Would love a lesson on how to speed it up. Only...

CVE-2025-64424-Coolify-

Coolify CVE-2025-64424 RCE Vulnerability Lab Lesson Plan: Red74-Coolio-CVE-2025-64424 Disclaimer: This repository contains a deliberately vulnerable version of Coolify and is intended for educational purposes, CTF environments, and cybersecurity training. Do not deploy this in a production...

Exploit for OS Command Injection in Asus Rt-Ax55_Firmware

CVE-2023-41348 — ASUS RT-AX55 — инъекция в code-auth Лаборато...

Exploit for OS Command Injection in Asus Rt-Ax55_Firmware

CVE-2023-41346 — ASUS RT-AX55 — инъекция в token-refresh Лабо...

Exploit for OS Command Injection in Zyxel Vmg1312-B10A_Firmware

CVE-2024-40891 — Zyxel VMG4325-B10A — command injection post-...

CVE-2017-1000117

CVE-2017-1000117 This module can be used to test whether you are vulnerable to CVE-2017-1000117 git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 Output if you are vulnerable: $ git clone https://github.com/timwr/CVE-2017-1000117.git...

Exploit for OS Command Injection in Pfsense Pfblockerng

CVE-2022-40624 — pfBlockerNG — Host header → root RCE Лаборат...

Exploit for CVE-2024-9441

CVE-2024-9441 — Linear eMerge — unauthenticated OS command inj...

Exploit for Command Injection in Chinamobile Intelligent_Home_Gateway_Firmware

CVE-2023-41011 — China Mobile HG6543C4 — command execution Ла...

Exploit for OS Command Injection in Dasannetworks W-Web

CVE-2023-42495 — Dasan W-Web — OS command injection Лаборатор...

Exploit for OS Command Injection in Gpononu 1Ge_Router_Wifi_Onu_V2801Rw_Firmware

CVE-2020-8958 — Boa formPing — command injection Лаборатория...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Background pfBlockerNG is the Next Generation of pfBlocker with the following features: 1. Manage IPv4/v6 List Sources into 'Deny, Permit or Match' formats. 2. GeoIP database by MaxMind Inc. GeoLite2 Free version. 3. De-Duplication, Suppression, and Reputation...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

awesome-jenkins-rce-2019

awesome-jenkins-rce-2019 There is no pre-auth RCE in Jenkins since May 2017, but this is the one! It chains CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 to a more reliable and elegant pre-auth remote code execution! Affect list ANONYMOUSREAD disable Jenkins version 2.138 ANONYMOUSREAD...

CVE-2026-26831

CVE-2026-26831: OS command injection in textract Summary textract through version 2.5.0 allows OS command injection through the file path supplied to multiple extractors. Several code paths pass that file path into childprocess.exec with inadequate sanitization. An attacker who can influence the...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE An authenticated low-privileged user can exploit a command injection vulnerability to get code-execution as www-data and escalate privileges to root due to weak sudo rules. QuickBox Pro v2.1.8 and prior is vulnerable...