cupspot-2024-47177

Honeypot de CUPS Resumen Este proyecto implementa un honeypot para capturar intentos de explotación de vulnerabilidades en CUPS Common UNIX Printing System. Específicamente, está diseñado para monitorear intentos de explotación relacionados con CVE-2024-47177. Esta vulnerabilidad permite la...

-CVE-2014-6271-Shellshock-Remote-Command-Injection-

CVE-2014-6271 Shellshock-Remote-Command-Injection CVE-2014-6271 Herramienta de Apache Shellshock de inyección remota de comandos para shell inversa rápida y navegación de archivos Shellshock Apache remote exploit Usage: ./Shellshock.py payload=reverse rhost=1.2.3.4 page=3 lhost=5.6.7.8 lport=1234...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploit started on po...

CVE-2021-22205

Impacto de la Vulnerabilidad Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 11.9. GitLab no validaba correctamente los archivos de imagen que se pasaban a un analizador de archivos, lo que resultó en una ejecución remota de comandos. Producto...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Proof-of-concept exploit for the Log4j vulnerability CVE-2021-44228, also known as Log4Shell. This tool generates a malicious Java class, starts an LDAP referral server, and serves the payload over HTTP, allowing a remote attacker to execute arbitrary commands on a...

Gorsair

Gorsair Gorsair es una herramienta de pruebas de penetración para descubrir y acceder remotamente a APIs de Docker desde contenedores Docker vulnerables. Una vez que tiene acceso al demonio de Docker, puedes usar Gorsair para ejecutar comandos directamente en contenedores remotos. Exponer la API ...

vsftpd-backdoor

Exploit para el Backdoor vsftpd 2.3.4 CVE-2011-2523 Este exploit aprovecha un backdoor en la versión 2.3.4 del servicio FTP vsftpd. El backdoor fue introducido en el código fuente de manera maliciosa y permite la ejecución remota de comandos como root en el servidor afectado Funcionamiento El...

MovableType - Remote Command Injection

MovableType 5002 and earlier Movable Type Advanced 7 Series, Movable Type Advanced 6.8. 2 and earlier Movable Type Advanced 6 Series, Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

F5 iControl REST - Remote Command Execution

F5 iControl REST interface is susceptible to remote command execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. This affects BIG-IP 16.0.x before 16.0.1.1, 15.1.x before...

YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

PT-2026-104430

Name of the Vulnerable Software and Affected Versions Amazon SageMaker Distribution versions prior to 2.14.12 Amazon SageMaker Distribution versions prior to 3.9.12 Amazon SageMaker Distribution versions prior to 4.0.11 Amazon SageMaker Distribution versions prior to 4.1.11 Amazon SageMaker...

0-click-RCE-Exploit-for-CVE-2024-50498

CVE-2024-50498 / 0-Click RCE Exploit Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1858512517774868845 Este repositorio contiene un exploit de prueba de concepto para CVE-2024-50498, una vulnerabilidad de inyección de código no autenticada en el plugin LUBUS WP Query Console de...

CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass

CVE-2019-6340 / SA-CORE-2019-003 Se incluyen tres scripts para demostrar cómo Drupal 8.6.9 es vulnerable a CVE-2019-6340: createnodeviarest.py - Ejemplo de creación normal de nodo autenticado con la API REST doesnotcorrespond.py - Demostración de que la solicitud se procesa incluso sin...

CVE-2018-17431-PoC

CVE-2018-17431-PoC Prueba de concepto para CVE-2018-17431 Título del Exploit: Comodo Firewall & Central Manager UTM Todas las versiones anteriores a 2.7.0 y 1.5.0 Ejecución remota de comandos basado en Web Shell Autor del Exploit: Milad Fadavvi Página del vendedor: https://www.comodo.com/ Enlace...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

routers-exploit

OpenSource Repo with PoC's and vulns found in routers TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC CVE-2020-9374 - TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC Payload: "$ls" TP LINK TL-WR849N - Auth Bypass: Firmware and Configs update TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC...

PHP-8.1.0-dev_WebShell-RCE

PHP 8.1.0-dev WebShell RCE Unauthenticated Exploit Code for PHP 8.1.0-dev WebShell RCE Unauthenticated Expected outcome: Exploiting backdoor installed on PHP 8.1.0-dev server thereby obtaining WebShell to execute commands remotely. Intended only for educational and testing in corporate...

CVE-2023-20198-Exploit

Cisco IOS XE Authentication Bypass CVE-2023-20198 This repository contains a proof-of-concept exploit for CVE-2023-20198 , an authentication bypass vulnerability affecting Cisco IOS XE Web UI. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable Cisco...