GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2025-20281-2-Cisco-ISE-RCE

CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for CVE-2025-20281 RCE against Cisco ISE API CVE-2025-20281 Unauthenticated PoC A minimal Python proof-of-concept that exploits the unauthenticated RCE in Cisco ISE’s ERS API CVE-2025-20281 by injecting arbitrary shell commands into the...

ForgottenButNotGone

Forgotten but Not Gone This repository contains proof-of-concept scripts for the vulnerabilities presented at the talk "Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services" from Black Hat USA 2026 and DEF CON 34. CVE-2026-28372 Local privilege escalation in TelnetD:...

CVE-2024-36401-WoodpeckerPlugin

CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...

CVE-2020-7247

CVE-2020-7247 This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtpmailaddr” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user How to use? python3 getShell.py If you need a reverse shell then run it...

CVE-2022-22947

CVE-2022-22947 Memory Shell Injection Supports injection of three types of memory shells root@kitploit: Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Taking Godzilla shell injection as an example root@kitploit: pytho...

CVE-2019-15107

Webmin Server Management Tool RCE Vulnerability CVE-2019-15107 Summary CVE-2019-15107 is a vulnerability in Webmin, a web-based system administration tool for Unix systems. In the code that changes passwords, a specific parameter is passed directly to a shell command without filtering, allowing...

vulnx

VulnX Vulnx 🕷️ — интеллектуальный бот для автоматического внедрения оболочек, обнаруживающий уязвимости в CMS различных типов...

CVE-2015-3306-Home-Lab

ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...

CVE-2012-2982-Webmin-Exploit

Webmin 1.590 Remote Command Execution Exploit CVE-2012-2982 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2012-2982 , a remote authenticated command execution vulnerability affecting Webmin versions 1.590 and earlier. The vulnerability resides in the /file/show.cgi...

spring_cloud_gateway_memshell

CVE-2022-22947 memshell 이 스크립트는 완성되지 않았으며 학습용으로만 사용하십시오. 불법적인 사용은 금지합니다. c0ny1 고수의 블로그를 기반으로 만든 학습 스크립트로, netty 및 spring 메모리 셸을 주입할 수 있습니다. 테스트 환경은 vulhub입니다. root@kitploit: eg:xx.py http://127.0.0.1:8080 netty whoami...

CVE-2025-47227_CVE-2025-47228

ScriptCase - Pre-Authenticated Remote Command Execution Chaining administrator's password reset authentication bypass, CVE-2025-47227 and shell injection authenticated remote command execution, CVE-2025-47228 Pre-authenticated remote command execution is achieved by chaining two vulnerabilities:...

CVE-2025-10230

CVE-2025-10230: Samba Critical RCE CVSS 10.0 Vulnerability Summary CVE-2025-10230 is a critical remote code execution RCE vulnerability that remained hidden in the Samba codebase for 13 years. The flaw resides in the handling of WINS Windows Internet Name Service registration packets. When...

poc-rebar3

Rebar3 shell injection CVE-2020-13802 Proof of concept root@kitploit: git clone https://github.com/vulnbe/poc-rebar3.git cd poc-rebar3 rebar3 clean Credit Alexey Pronin @vulnbe References Rebar3 vulnerability analysis Vulnerability remediation PR CVE-2020-13802 CWE-78: Improper Neutralization of...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 vulnerability scanning and exploitation tool for remote code execution in Next.js applications. Supports batch detection, command execution, Godzilla memory shell injection, and reverse shell functionality. ⚠️ This tool is intended for security...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

CVE-2020-16846-Saltstack-Salt-API

CVE-2020-16846-Saltstack-Salt-API Vulnerability Explained: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. The details about this vulnerability can be found here:...

CVE-2026-65638

ConfigServer Security & Firewall (CSF) is vulnerable to shell command injection due to improper escaping of a request URL. An unauthenticated remote attacker can exploit this to execute arbitrary commands as the CSF service account. The CVSS 4.0 score is 9.2 (Critical) with a network attack vecto...

CVE-2026-88275

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...

CVE-2026-88276

GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...