41305 matches found
CVE-2026-40176
CVE-2026-40176 — Composer Perforce Driver Command Injection Proof of Concept A self-contained, OOP-style PHP proof of concept that demonstrates and differentially verifies a command-injection vulnerability in Composer's Perforce repository driver. The PoC runs the same malicious composer.json...
CVE-2019-12476
ADSelfService-Plus-PoC CVE-2019-12476 ADSelfService Plus version 4.3.3 PoC for an authentication bypass on Windows 10. Affects all versions of Windows PoC Video Steps to repoduce 1. Disconnect from your enterprise network 2. Connect to your own hotspot 3. Click on reset password; the thick client...
CVE-2024-49668
🚨 CVE-2024-49668: WordPress Verbalize WP Plugin Arbitrary File Upload Vulnerability 📋 Overview CVE-2024-49668 is a critical vulnerability in the WordPress Verbalize WP plugin versions 1.0 and below. This vulnerability allows unauthenticated attackers to upload arbitrary files, including web shell...
Node.js-CVE-2017-5941
NodeJS Insecure Deserialisation Vulnerability Demo Node.js is an open-source runtime environment used to implement server functionality in JavaScript. A specific software package within Node.js contains a vulnerable function dealing with deserialisation, that causes it to run unauthorised command...
CVE-2024-25600-mass
mass upload shell for cve python3 exploit.py -l yourlist.txt path shell https://examplewebsite.com/asd.php...
CVE-2022-34303
🕷️ CVE-2022-34303 - CryptoPro Boot Loader Vulnerability CryptoPro Secure Disk UEFI Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed UEFI Shell and gSecurity2 corruption. 📑 Table of Contents Overview Background Bring Your Own Vulnerable UEFI Application The...
CVE-2022-34301
🕷️ CVE-2022-34301 - Eurosoft Boot Loader Vulnerability Eurosoft Pc-Check UEFI Diagnostics Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed UEFI Shell and gSecurity2 corruption. 📑 Table of Contents Overview Background Bring Your Own Vulnerable UEFI...
CVE-2026-24061
Telnet Vulnerability Scanner & Exploiter This Python script main.py is a multi-threaded tool designed to scan a list of target IPs/hostnames and attempt to exploit a specific vulnerability over Telnet. !WARNING This tool is intended for educational purposes and authorized penetration testing only...
CVE-2010-2075-UnrealIRCd-3.2.8.1
CVE-2010-2075 Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1. Requirements optparse, signal Usage You can send a command to execute, but there will be times when it will not respond, but you can simply send a reverse shell and wait for it to arrive...
docker-POC_CVE-2024-1086
https://github.com/Notselwyn/CVE-2024-1086 usage docker compose up -d --build docker exec -it poccve20241086 bash test sample tester@e23a4e5757d9 CVE-2024-1086$ id uid=99999tester gid=99999tester groups=99999tester tester@e23a4e5757d9 CVE-2024-1086$ cat /etc/shadow cat: /etc/shadow: Permission...
CLEANSTART-2026-VG90547 shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token
Security vulnerability affects the n8n package. shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token...
USSH
USSH USSH is a shell protocol and client/server pair built on top of USTP-Secure. It is not a TCP tunnel and does not wrap SSH inside TCP. Status: Beta License: MIT AEAD cipher names chacha20 = CHACHA20POLY1305 aes-256-gcm = AES256GCM aes-128-gcm = AES128GCM Default AEAD cipher: chacha20 Default...
CVE-2019-18634
CVE-2019-18634 working python exploit on Ubuntu 20.04, sudo version 1.8.25 replace "./shell.sh" with your reverse shell writeup at https://y3a.github.io/2021/04/17/sudo-cve-analysis/...
CVE-2026-101947: Improper Neutralization of Special Elements used in an OS Command
ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped...
wwwolf-php-webshell
wwwolf's PHP web shell I frequently encountered issues when using other web shells: They use new PHP syntax features not compatible with the old PHP version running on some targets. They make wrong assumption on the remote URL, breaking PHP code injection or GET parameters unexpected by the serve...
SeManageVolumeExploit
SeManageVolumeExploit This exploit grants full permission on C:\ drive for all users on the machine. Enables the privilege in the token Creates handle to \.\C: with SYNCHRONIZE | FILETRAVERSE Sends the FSCTLSDGLOBALCHANGE to replace S-1-5-32-544 with S-1-5-32-545 Overwriting "Printconfig.dll" for...
CVE-2021-3156
CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...
CVE-2025-3248
CVE-2025-3248 Introduction Langflow versions prior to 1.3.0 are susceptible to unauthenticated code injection in the /api/v1/validate/code endpoint via Python exec function. This exploit establishes a reverse shell connection abusing this vulnerability. Usage Configuration git clone...
zip-shotgun
ZIP Shotgun Script utility per testare la funzionalità di upload di file zip e la possibile estrazione di file zip per vulnerabilità alias Zip Slip. L'idea per questo script proviene da questo post su Silent Signal Techblog - Compressed File Upload And Command Execution e da OWASP - Test Upload o...
