CVE-2024-27956

WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 A proof-of-concept exploit for the SQL injection vulnerability in WP Automatic plugin CVE-2024-27956 affecting WordPress sites. 📌 Description This exploit targets a critical unauthenticated SQL injection vulnerability in the WP Automatic...

CVE-2025-31161

CVE-2025-31161 - CrushFTP Authentication Bypass Exploit PoC CVE-2025-31161 - Authentication Bypass CrushFTP 📌 CVE Details ID : CVE-2025-31161 Type : Authentication Bypass Vendor : CrushFTP Impact : Allows unauthenticated attackers to forge a valid CrushAuth token and create a fully privileged adm...

confluence-hack

Confluence Hack CVE-2023-22515 exploit.py Exploit to create a new admin user Compromised audit log: As a reverence served: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html and https://github.com/Chocapikk/CVE-2023-22515 pluginshellplug.j...

CVE-2024-4898

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

Mass-CVE-2023-28121

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...

CVE-2025-54309

CVE-2025-54309 CrushFTP Authentication Bypass Overview CVE-2025-54309 is an authentication bypass vulnerability in CrushFTP that allows unauthorized administrative user creation through AS2 header manipulation. Technical Details Vulnerability Location File : crushftp/server/ServerSessionHTTP.java...

CVE-2024-42327

PoC for CVE-2024-42327 / ZBX-25623 A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the...

CVE-2023-42793

CVE-2023-42793 description A security vulnerability in JetBrains TeamCity allows an attacker to create a new user given by the attacker with administrative privileges. Usage example ./cve-2023-42793 http://teamcity.examplewebsite.com username password...

WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

CVE-2024-27198

EN GenTeamCityExploit is a PoC tool that targets a vulnerability in the TeamCity server CVE-2024-27198. It enables the discovery of a TeamCity version and the creation of a new admin user by exploiting an authentication bypass flaw. Features Extracts the version of the TeamCity server. Checks for...

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Automated Exploit for CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks...

CVE-2024-0204

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT Script to create a new admin user in GoAnywhere MFT. Blog Post More details here: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Usage Password must be at least 8 characters long to meet GoAnywhere...

Advance Post Prefix WordPress plugin - Reflected XSS

Advance Post Prefix WordPress plugin through 1.1.1 contains a reflected cross-site scripting caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12734 info: name: Advance...

connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 및 CVE-2024-1709 @watchTowr가 개발한 PoC로, ConnectWise ScreenConnect에서 인증 우회를 악용하여 새로운 관리 사용자를 추가합니다. 이는 간단한 원격 명령 실행RCE 체인의 첫 단계입니다. 보안 연구를 위해 watchTowr Labs 팀을 팔로우하세요 https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...

CVE-2024-27956-RCE

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...

CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...

ScreenConnect-AuthBypass-RCE

How to use I'm using Python3.9 pip install requests python check.py python batchAdduser.py python ScreenConnect-AuthBypass-RCE.py -h usage: ScreenConnect-AuthBypass-RCE.py -h -u USERNAME -p PASSWORD -t TARGET -d DOMAIN --proxy PROXY CVE-2024-1708 && CVE-2024-1709 -- RCE!!! optional arguments: -h,...

CVE-2022-31294

CVE-2022-31294 Online Discussion Forum Site 1.0 - Account Takeover Exploit Title: Online Discussion Forum Site 1.0 - CSRF Create New/Update Existing Admin User Account Takeover Date: 2022-06-13 CVE: CVE-2022-31294 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage:...

CVE-2023-42793

TeamCity CVE-2023-42793 익스플로잇 이 Python 스크립트는 JetBrains TeamCity의 보안 취약점CVE-2023-42793을 악용하여 공격자가 관리자 권한을 가진 새 사용자를 생성할 수 있게 합니다. 사용법 이 스크립트는 단일 TeamCity 인스턴스 URL 또는 URL 목록을 입력으로 받습니다. 제공된 URL은 CVE-2023-42793에 취약한 TeamCity 서버를 가리켜야 합니다. 단일 URL: python exploit.py -u http://teamcity.example.com URL...

CVE-2023-2859

CVE-2023-2859: Stored HTML injection in folderName affecting Admin in TeamPass 3.0.9 - M Nadeem Qazi Hi, I have found a major vulnerability in the nilsteampassnet/teampass application that involves stored HTML injection in the FolderName field. By inserting malicious HTML code into the FolderName...