cve-2022-26134

CVE-2022-26134 Implementation of CVE-2022-26134 This repository contains my implementation of the exploit for CVE-2022-26134. The version implemented here bypasses the isSafeExpression checks in versions such as 7.18.0. The exploit can be run in two modes: The first mode allows you to run one...

LibSSH-Authentication-Bypass

LibSSH-Authentication-Bypass LibSSH Authentication Bypass CVE-2018-10933 Usage: To use this script type in: python3 LibAuth.py –help to see all the options and parameters we need to use. So we need to specify the victim’s IP address, port no and finally the command that we want to execute in the...

Apache-Struts-2-CVE-2017-5638-Exploit-

Apache-Struts-2-CVE-2017-5638-Exploit Este exploit explota la vulnerabilidad Apache Struts2 CVE-2017-5638, permitiéndonos ejecutar comandos de forma remota en el servidor Apache Cómo usar: $ sudo python Struts2Shell001.py ! Exploit Apache Struts2 DEMO Código de Rvbk + HOST con https Sitio con...

aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Description : allows remote authenticated users to execute arbitrary commands via the setting menu of Sotfware Store. Affected version : All = 6.6.6 Information To make this PoC, I just installed the software using docker-compose Vulnerability Type : Remote...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Descripción : Explotando un ataque de falsificación de petición en sitios cruzados CSRF para crear un usuario privilegiado a través de la función de añadir usuarios de Webmin y luego obtener una shell inversa a través de la función de procesos en ejecución de...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2025-32433_Erlang-OTP_PoC

CVE-2025-32433Erlang-OTP This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running...

CVE-2020-16947

CVE-2020-16947 Ejecución remota de comandos en Outlook 2019 Este error ocurre al analizar contenido HTML. Si un atacante ejecuta con éxito este exploit, puede provocar la ejecución remota de comandos. Al copiar cadenas fuera del rango ASCII entre contenido HTML, la cadena correspondiente se...

CVE-2019-12725

CVE-2019-12725 CVE-2019-12725 ZeroShell Remote Command Execution Vulnerability =================================================== My own practice project...

CVE-2024-32002

CVE-2024-32002 Versions 1.0.0 This version work only on remote target with authenticated user and git version 2.45.0 affected. This vulnerability affect Git with version: 2.45.0 Proof Of Concept The POC can trigger an RCE Remote Command Execution using the git clone command via specific vulnerabl...

CVE-2019-20197

Nagios XI Remote Command Execution Vulnerability CVE-2019-20197 POC: POST /nagiosxi/includes/components/scheduledreporting/schedulereport.php HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64; rv:49.0 Gecko/20100101 Firefox/49.0 Accept:...

cve-2022-1388-iveresk-command-shell

CVE-2022-1388 by 1vere$k with command shell Improved POC for CVE-2022-1388 that affects multiple F5 products. This is an improved version of Horizon3's Proof of Concept for CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 Also it's a complete rework with refactoring for PsychoSec work b...

CVE-2021-44967

CVE-2021-44967 - Authenticatedprivileged RCE Authenticated privileged remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload arbitrary PHP code file. Usage python3 exploit.py --url --user --password --lhost --lport A superadmin user is...

CVE-2026-105841

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246: Apache RocketMQ Remote Command Execution Vulnerability Detection Tool Tool Features Simple Usage Run ./apacherocketmqcve202333246scannerlinuxamd64 scan Output: Whether the vulnerability exists: Yes or VulnFound: true indicates the vulnerability exists, and the Versi...

CVE-2019-12840_POC

CVE-2019-12840POC PoC for Webmin Package Update Authenticated Remote Command Execution An alternative to the metasploit module. All credit goes to Özkan Mustafa Akkuş https://www.pentest.com.tr/exploits/Webmin-1910-Package-Updates-Remote-Command-Execution.html...

CVE-2024-36401

CVE-2024-36401 GeoServer Exploitation Tool Vulnerability Overview CVE-2024-36401 is a remote command execution vulnerability in GeoServer. An attacker can execute arbitrary commands without authorization by crafting a specific WFS Web Feature Service request. Requirements Python 3.x Install...

Lilith

Lilith Free & Native Open Source C++ Remote Administration Tool for Windows Lilith is a console-based ultra light-weight RAT developed in C++. It features a straight-forward set of commands that allows for near complete control of a machine. Disclaimer The use of this software on any device that ...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

CVE-2022-42889

Aplicación de prueba CVE-2022-42889 Este repositorio contiene una aplicación simple que utiliza Apache Commons Text 1.10, la cual es vulnerable a CVE-2022-42889. Ejecución de la aplicación Reemplace el comando nc en DemoApplication.java por la dirección IP de su host. Escuchando con netcat: $ nc ...