CVE-2024-3400

CVE-2024-3400 Exploit for GlobalProtect CVE-2024-3400 This exploit targets the original vulnerability, so the firewall must be running a vulnerable PAN-OS version and must have telemetry enabled. Ref: https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/ Sample...

CVE-2019-0232

Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...

PCmanBoF

PCman FTP Server Buffer overflow and Remote Code Execution CVE-2013-4730 A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7 How it works? That easy BoF overwrite the buffer and execute the shellcode that will connect back reverse shell Vuln machines: WindowsXP SP...

CVE-2019-12735

CVE-2019-12735 This CVE was fixed after neovim 0.3.6 and vim 8.1.1365 POC vim demo1.txt Remote shell 1. Create malware text file: gcc makedemo3.c -o makedemo3 ./makedemo3 2. Build client in another session: nc -vlp 9999 3. Open malware file: vim demo3.txt And then, you can execute any linux...

cve-2025-24893

CVE-2025-24893 XWiki RCE Exploit A simple Python3 script to exploit CVE-2025-24893 , a remote code execution vulnerability in XWiki Platform, using a Groovy-based async macro and a configurable reverse shell payload. ⚠️ WARNING: This tool is provided for educational and authorized testing purposes...

CVE-2023-45878

CVE-2023-45878 GibbonEdu Arbitrary File Write to Web Shell Execution Description This repository contains an exploit for CVE-2023-45878 , an arbitrary file write vulnerability in GibbonEdu. The vulnerability affects the rubricsvisualisesaveAjax.php endpoint and allows an unauthenticated attacker ...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2025-23942-poc

WP Load Gallery Exploit CVE-2025-23942 📌 Description Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. ⚠️ Vulnerability Details CVE ID: CVE-2025-23942...

APT-Backpack

APT-Backpack Most common used CVE's by APT, legitimate RAT and other tools used by adversary CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Unauth file read CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX Unauth Command...

CVE-2024-4947-PoC

CVE-2024-4947 — V8 Maglev Type Confusion → Full RCE d8 PoC A complete, self-contained exploitation chain for CVE-2024-4947 V8 Maglev type confusion, from the initial type-confusion trigger all the way to arbitrary code execution. The PoC runs against a non-sandboxed d8 build and prints...

Invisi-Shell

Invisi-Shell Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features ScriptBlock logging, Module logging, Transcription, AMSI by hooking .Net assemblies. The hook is performed via CLR Profiler API. Work In Progress This is still a preliminary version...

CVE-2021-44228-PoC

CVE-2021-44228 PoC PoC for CVE-2021-44228. Project made for EDUCATIONAL PURPOSES ONLY. Exploit server This project creates two servers: http and ldap. Both are necessary for exploit to work. Specified java file is compiled and servers are started in Dockerfile. Payload is shown to user - it has t...

CVE-2022-22947

Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...

CVE-2024-37084-Poc

CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc about CVE-2024-37084 How to use : py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h, --help show...

PE_CVE-CVE-2021-3156

PECVE-CVE-2021-3156 Exploit for Ubuntu 20.04 using CVE-2021-3156, enhanced with simple and automated post-exploitation scripts Besides the root shell you can have: -A .txt file with all the idrsa ssh keys configured in the server. See the script: getallsshkeys.sh -A privshell executable that allo...

CVE-2025-24801

CVE-2025-24801 PoC for GLPI RCE This repository contains a proof-of-concept script poc.py that exploits CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. It automates: Logging into GLPI Enabling .php uploads by updating document type settings Uploading a PHP reverse shell via the AJAX...

CVE-2025-34040Exp

Seeyon OA has file upload leading to RCE CVE-2025-34040 Parameters options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 -n FILENAME, --filename FILENAME 请输入文件名（默认为Hello.jsp）： -c CONTENT, --content CONTENT 请输入上传的文件内容（默认为HelloWord）：...

zaphoxx-coldfusion

zaphoxx-coldfusion coldfusion exploit based on https://cvedetails.com/cve/CVE-2009-2265/ The main reason I setup a python script for this particular cve was that the metasploit version of the same did not work for me when I tried to solve the HTB machine Arctic. Also it was nice to get some littl...

CVE-2026-52618

CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars spawncmd0, cmd.slice1, shell: true re-joins an argument array into a single /bin/sh -c string without escaping, so a shell metacharacter in an extraVars value supplied to the executeDeployment MCP...

CVE-2026-39987.py

CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. HOW TO USE : The only change it has to be made is to the change the HOST variable in the script. After changing the HOST variable execute the script in your Terminal like the...