CVE-2020-17456

Description On August 21, 2020, seown SLC 130 router was exposed to have an authentication rce vulnerability. The vulnerability number is cve-2020-17456. The vulnerability is due to the ping command injection in the router's Web service diagnosis function. Combined with several groups of hard cod...

CVE-2023-0830

CVE-2023-0830: EasyNAS 1.1.0 Authenticated OS Command Injection Exploit This Python script is a powerful exploit for EasyNAS version 1.1.0 with enhanced functionality, including an integrated listener. The vulnerability exploited is a command injection flaw, which requires authentication. The...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...

CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC

🔐 CVE-2023-51385 - OpenSSH ProxyCommand Injection PoC This repository contains a proof-of-concept for CVE-2023-51385, a command injection vulnerability in OpenSSH's ProxyCommand option. An attacker with control over SSH configuration or untrusted ProxyCommand strings can potentially achieve...

CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection

CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection CVE-2025-7404 exploit...

CVE-2022-46649

CVE-2022-46649 PoC exploit for CVE-2022-46649, a command injection vulnerability in the /cgi-bin/iplogging.cgi endpoint. The vulnerability allows authenticated attackers to execute arbitrary OS commands via crafted tcpdumpParams. Overview Vulnerability: OS Command Injection Endpoint:...

CVE-2026-5059-poc

Где находится CVE-2026-5059 в коде? Уязвимость заключается в двух файлах, работающих вместе: Файл 1: tools.py — Первопричина В старой версии использовался shell=True в executepipedcommand: python OLD VULNERABLE CODE process = subprocess.run command, ← raw string passed to shell shell=True, ← THIS...

CVE-2024-3400-Checker

CVE-2024-3400-Checker 中文版本 A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Usage: 1. Install requirements. python3 -m pip install -r requirements.txt 2. Run python3 main.py 3. Set threads in main.py, default is 20 workers...

CVE-2025-34030-PoC

CVE-2025-34030 - sar2html 'plot' parameter RCE CVSS: 10.0 Critical Vulnerability: OS Command Injection Programming Language: PHP Exploit Code: Python References: https://nvd.nist.gov/vuln/detail/CVE-2025-34030 https://www.vulncheck.com/advisories/sar2html-command-injection Description sar2html...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- This is a D-Link RCE vulnerability detection program Vulnerability Overview D-Link DNS-320, etc., are NAS Network Attached Storage devices from D-Link China. Multiple D-Link products have a security vulnerability, which stems from erroneous operations on the parameter...

CVE-2020-11981-PoC

Example Build demo stand docker-compose up -d VM docker-container: 172.18.0.2 Command PoC docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt INFO Vulnerability description: The...

CVE-2021-40113

CVE-2021-40113 Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the...

litellm-command-injection-security-assessment

CVE-2026-42271 - LiteLLM AI Gateway MCP Command Injection RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for LiteLLM command injection risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Detail...

Project-Exploitation-of-Webmin-Authentication-Vulnerability

Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...

rConfig_rce

rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...

CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

RCE-PoC-CVE-2021-25646

CVE-2021-25646 Proof-of-Concept Go Version Overview This repository contains a proof-of-concept PoC exploit for CVE-2021-25646, a critical remote code execution vulnerability in Apache Druid. The exploit is written in Go and allows for interactive command injection via the terminal. Features...

CVE-2019-19781

CVE-2019-19781 Just a python3 CVE-2019-19781 exploit for Citrix behind a cache. This version accepts '', '|', '2&1'... etc USAGE python3 CVE-2019-19781.py citrix.example.org 'cat /etc/passwd' Todo Repeat if Age header in response. Continuous mode -c. Check mode Get /vpn/../vpns/cfg/smb.conf...

PcanExploit

CVE-2024-44610: PEAK PCAN-Ethernet Gateway FD DR Authenticated Root Exploit What is it? This repository contains a Proof-of-Concept PoC exploit that executed code as root on Peak Ethernet gateways. It requires that you know the credentials to the web interface. How to fix it? The vendor has rapid...

CVE-2026-25643

Frigate NVR ≤ 0.16.3 Blind RCE Exploit CVE-2026-25643 PoC 📜 Description This Python exploit targets a critical configuration manipulation vulnerability in Frigate NVR versions up to 0.16.3 both authenticated and unauthenticated paths. By injecting a malicious go2rtc stream and a fake camera entry...