CVE-2019-19356

NETIS router WF2419 RCE CVE-2019-19356 Context The vulnerability is an authenticated Remote Code Execution RCE as root through the NETIS WF2419 router Web management page. The vulnerability has been found on firmware version V1.2.31805 and on the last available firmware version V2.2.36123. Other...

CVE-2026-16348

TP-Link Archer BE800 V1 — Authenticated RCE via VPN Key Injection CVE: CVE-2026-16348 CVSS: 8.5 High — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L Auth required: Valid admin credentials Network position: Network remote if management interface exposed Summary The VPN server...

Limesurvey-RCE

Limesurvey-RCE LimeSurvey Authenticated RCE Proof of Concept: 1. Create your files config.xml and php reverse shell files 2. Create archive with these files 3. Login with credentials 4. Go Configuration - Plugins - Upload & Install 5. Choose your zipped file 6. Upload 7. Install 8. Activate plugi...

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script Usage: python3 CVE-2020-5844.py URL USER PASS...

CVE-2023-20887

CVE-2023-20887 Exploit VMWare vRealize Network Insight Pre-Authenticated RCE CVE-2023-20887 Usage usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST,...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 Authenticated RCE Through Malicious Configuration File Upload CVE-2018-19537 Description An authenticated remote code execution RCE vulnerability exists in all published firmware versions for the TP-Link Archer C5 router. By uploading a maliciously crafted configuration file, an...

randy

Randy What This is a pre-authenticated RCE exploit for Inductive Automation Ignition that impacts versions = 8.1.16. We failed to exploit the bugs at Pwn2Own Miami 2022 because we had a sloppy exploit and no debug environment, but since then we have found the time and energy to improve it! Author...

CVE-2026-26119

CVE-2026-26119 - Windows Admin Center authenticated PowerShell execution PoC Proof-of-concept for CVE-2026-26119, classified by Microsoft as an elevation-of-privilege / improper-authentication vulnerability CWE-287 in Windows Admin Center WAC. An authenticated low-privilege WAC user can drive the...

Havoc-C2-SSRF-to-RCE

Havoc-C2-SSRF-to-RCE This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework...

CVE-2026-25512-PoC-Group-Office-Authenticated-RCE

CVE-2026-25512 PoC – Group-Office Authenticated RCE via TNEF Handler Author: Mohammed Idrees Banyamer Handle: @banyamersecurity GitHub: mbanyamer Date: February 04, 2026 Exploit Title Group-Office Intermesh 26.0.4 – Authenticated RCE via TNEF Attachment Handler CVE CVE-2026-25512 CWE CWE-78 OS...

CVE-2023-4861-PoC

CVE-2023-4861 PoC This repository contains a Python proof of concept for CVE-2023-4861 , an authenticated remote code execution issue in the WordPress plugin File Manager Pro - Filester. Vulnerability Summary CVE: CVE-2023-4861 Product: File Manager Pro - Filester filester Vulnerable versions:...

CVE-2026-50979

CVE-2026-50979: Authenticated Remote Code Execution in oPanel Overview CVE ID: CVE-2026-50979 Product: oPanel Affected Versions: v1.19.50 and earlier Vulnerability Type: Authenticated Command Injection / Remote Code Execution RCE Vulnerable Component: /advanced/curl endpoint Severity: Critical...

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵 Authenticated RCE Cacti version v1.2.26 Summary An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code ...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/hook-s3c/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100G...

CVE-2026-23885

Security Advisory: CVE-2026-23885 Authenticated Remote Code Execution RCE in AlchemyCMS 1. Executive Summary A critical security vulnerability involving Improper Neutralization of Directives in Dynamically Evaluated Code CWE-95 was discovered in the AlchemyCMS framework. The vulnerability allows...

CVE-2023-46747-RCE

Vulnerability Details fofa： title="BIG-IP" || iconhash="-335242539" shodan title:"BIG-IP" Affected versions https://my.f5.com/manage/s/article/K000137353 Vulnerability Recurrence 1. At this time, the user here is only admin: 2. Execute the script: git clone...

CVE-2026-55511

CVE-2026-55511: Yamcs StreamSQL Authenticated RCE Non-weaponized proof of concept and technical documentation for CVE-2026-55511, an authenticated Java code-injection vulnerability in the Yamcs StreamSQL aggregate-expression compiler. Field| Value ---|--- Product| Yamcs org.yamcs:yamcs-core...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand. Usage: python3 wacrce.py "" WACPASS= python3 wacrce.py Env: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...

FuguHub-8.4-Authenticated-RCE-CVE-2024-27697

FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Server Software. The version tested was the debian version at this link: https://fuguhub.com/articles/FuguHub-for-Debian An issue in Real Time Logic LLC FuguHub v.8.4 allows a local attacker to execute arbitrary code via a crafted script to t...