206 matches found
TP-L-NK-SIZMA-EXPLO-T
TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand. Usage: python3 wacrce.py "" WACPASS= python3 wacrce.py Env: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...
-CVE-2025-59528-PoC
CVE-2025-59528-PoC FOR EDUCATIONAL PURPOSES ONLY A simple python script to exploit CVE-2025-59528, this an Authenticated RCE vulnerability in Flowise application, a popular AI tool, that is also part of an HTB seasonal challenge, on which I tested it btw. If it's not working, make sure the comman...
CVE-2025-14700-poc
CVE-2025-14700 POC Automatic exploit for Authenticated RCE in Crafty Controller --login --password --lhost --lport This script uses netcat to setup a listener after triggering the reverse shell payload, it won't work if you don't have netcat on your listener machine...
CVE-2026-50979
CVE-2026-50979: Ejecución Remota de Código Autenticada en oPanel Resumen CVE ID: CVE-2026-50979 Producto: oPanel Versiones Afectadas: v1.19.50 y anteriores Tipo de Vulnerabilidad: Inyección de Comandos Autenticada / Ejecución Remota de Código RCE Componente Vulnerable: punto final /advanced/curl...
CVE-2019-9624
CVE-2019-9624 Authenticated RCE for Webmin 1.9.0 Webmin 1.900 Authenticated RCE - CVE-2019-9624 Exploit 1. Vulnerability Description CVE-2019-9624 is an authenticated Remote Code Execution RCE vulnerability in Webmin versions up to 1.900. It allows an administrative user to execute arbitrary...
CVE-2025-60787
CVE-2025-60787 — motionEye Authenticated RCE Authenticated command injection PoC for CVE-2025-60787. motionEye v0.43.1b4 and earlier write user-controlled camera configuration values such as imagefilename into Motion configuration without sufficient sanitization, allowing command execution when t...
CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server
CVE-2025-34322 and CVE-2025-34323 Nagios Log Server Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server, along with a combined script to return a shell as root. CVE-2025-34322 After auth, replace your session ID into these two curl commands. The first one set the...
CVE-2023-46304
CVE-2023-46304 Authenticated Remote Code Execution in VTiger Open Source CRM v7.5 Summary A vulnerability exists in the Users module in the current release of VTiger CRM Open Source version 7.5.0 which allows an authenticated attacker to write and execute arbitrary PHP code to config.inc.php...
POC-CVE-2025-68613
Description PoC exploit code for N8N authenticated RCE vulnerability CVE-2025-68613 Usage python3 poc.py -u -c...
edb-49263-fixed
edb-49263-fixed - GitLab 11.4.7 - Authenticated Remote Code Execution Fixed version of the Python script to exploit CVE-2018-19571 and CVE-2018-19585 GitLab 11.4.7 - Authenticated Remote Code Execution that is available at https://www.exploit-db.com/exploits/49263 Python 3.9. Usage Edit the scrip...
CVE-2019-19356
Enrutador NETIS WF2419 RCE CVE-2019-19356 Contexto La vulnerabilidad es una Ejecución Remota de Código RCE autenticada como root a través de la página de gestión web del enrutador NETIS WF2419. La vulnerabilidad se ha encontrado en la versión de firmware V1.2.31805 y en la última versión de...
CVE-2025-68613
🚀 n8n Authenticated RCE PoC Pocsuite3 CVE ID : CVE-2025-68613 Type : Authenticated Remote Code Execution Framework : Pocsuite3 This is a vulnerability verification and exploitation script based on the Pocsuite3 framework, used to detect the authenticated remote code execution RCE vulnerability in...
Havoc-C2-SSRF-to-RCE
Havoc-C2-SSRF-to-RCE This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework...
-CVE-2026-7465
-CVE-2026-7465 CVE-2026-7465 Spectra Gutenberg Blocks Authenticated RCE Exploit...
motioneye-authenticated-RCE
RCE autenticado en MotionEye/MotionEyeOS Un script de Python 3 que sube un archivo tasks.pickle que permite RCE en MotionEye. Necesitas credenciales de administrador, así que no debería ser un gran problema. Desafortunadamente, MotionEye/MotionEyeOS se puede encontrar frecuentemente ejecutándose...
cve-2021-31630
cve-2021-31630 OpenPLC WebServer v3 - RCE autenticado Este script PoC está basado en el exploit proporcionado por Fellipe Oliveira. Características : Sube directamente código C a /hardware en lugar de cargar un archivo st Restaura el programa predeterminado antes de cargar la reverse shell Revers...
redis-cve-2026-23479-check
redis-cve-2026-23479-check Un checker di versione sicuro, di sola lettura per CVE-2026-23479 — la use-after-free nel codice del blocking-client di Redis che consente a un utente autenticato di raggiungere l'esecuzione remota di codice sull'host. Non sfrutta la vulnerabilità. Si connette, autentic...
