BloodfangC2

Bloodfang es un implant moderno con código independiente de posición que compila a sistemas Windows de 64 y 32 bits. El shellcode del implant compilado ocupa unos 6 KB kilobytes. Su ejecución en memoria tiene una huella muy reducida. Créditos para:...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | Exploit de ejecución remota de código RCE en PHP-CGI Un exploit basado en Python para CVE-2012-1823. Esta vulnerabilidad permite a un atacante ejecutar código arbitrario en un servidor que ejecuta una versión vulnerable de PHP-CGI mediante la inyección de argumentos de línea de...

CVE-2021-21972

Usage:CVE-2021-21972.py option -u or --url：目标url -t or --type：Payload类型（ssh/webshell -f or --file：要上传的文件（webshell或authorizedkeys） 例如：CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p or --proxy：设置代理 例如：CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp 影响版本 VMware View Planner Harness 4.X 与 CVE-2021-21978 类似，该漏洞可以在未授权访问的情况下，上传任意文件，并通过修改自带 py 脚本实现远程代码执行。 值得注意的是，执行命令是在 docker 容器中，并不是直接在系统中执行。 用法： go run CVE-2021-21978.go -h -c...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: Vulnerabilidad RCE en ADSelfService Plus 1. Descripción de la vulnerabilidad ZOHO ManageEngine ADSelfService Plus es la solución integrada de gestión de contraseñas de autoservicio e inicio de sesión único de ZOHO para Active Directory y aplicaciones en la nube...

CVE-2022-22965

CVE-2022-22965 aka "Spring4Shell" Vulnerabilidad RCE en Spring Framework vía Data Binding on JDK 9+ El objetivo es centralizar la mayor cantidad de información de público conocimiento hasta el momento de la vulnerabilidad y poder saber qué acciones tomar en tal caso. ¿Mi aplicación es vulnerable?...

CVE-2022-22965-rexbb

CVE-2022-22965-rexbb springboot core 命令执行漏洞，CVE-2022-22965漏洞利用工具，基于JavaFx开发，图形化操作更简单，提高效率。 2022年12月28日-周三-21:44 这几天在做漏洞复现，突然发现之前错过了很多经典的漏洞，也包括这个sping core的rce，所以网上查了很多资料，发现还挺有意思的，但是抓包和发包实在是太麻烦（其实不麻烦，只是我懒，每次改请求包特备麻烦），所以有了现在的这个CVE-2022-22965的图形化漏洞利用工具——Rexbb.jar❤️。 一、工具展示与说明...

CVE-2020-17530

CVE-2020-17530 Apache Struts2框架是一个用于开发Java EE网络应用程序的Web框架。Apache Struts于2020年12月08日披露 S2-061 Struts 远程代码执行漏洞（CVE-2020-17530），在使用某些tag等情况下可能存在OGNL表达式注入漏洞，从而造成远程代码执行，风险极大。提醒我校Apache Struts用户尽快采取安全措施阻止漏洞攻击。...

Laminas Project laminas-http - Remote Code Execution

Laminas Project laminas-http 2.14.2 and Zend Framework 3.0.0 contain a deserialization vulnerability caused by destruct method in Zend\Http\Response\Stream, letting attackers control content lead to remote code execution, exploit requires attacker-controlled serialized data. id: CVE-2021-3007...

Apache Struts2 S2-062 - Remote Code Execution

Apache Struts2 S2-062 is vulnerable to remote code execution. The fix issued for CVE-2020-17530 S2-061 was incomplete, meaning some of the tag's attributes could still perform a double evaluation if a developer applied forced OGNL evaluation by using the %... syntax. id: CVE-2021-31805 info: name...

Zoho ManageEngine ADAudit Plus <7600 - XML Entity Injection/Remote Code Execution

Zoho ManageEngine ADAudit Plus before version 7060 is vulnerable to an unauthenticated XML entity injection attack that can lead to remote code execution. id: CVE-2022-28219 info: name: Zoho ManageEngine ADAudit Plus 7600 - XML Entity Injection/Remote Code Execution author: dwisiswant0 severity:...

Quest KACE System Management Appliance 8.0.318 - Remote Code Execution

The '/common/downloadagentinstaller.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. id: CVE-2018-11138 info: name: Quest KACE System Management Appliance 8.0.318 - Remote Code Executi...

Gogs 0.5.5 - 0.12.2 - Remote Code Execution

Gogs 0.5.5 through 0.12.2 is susceptible to authenticated remote code execution via the git hooks functionality. There can be a privilege escalation if access to this feature is granted to a user who does not have administrative privileges. NOTE: Since this is mentioned in the documentation but n...

QNAP Photo Station < 6.0.3 - Remote Code Execution

QNAP Photo Station versions prior to 6.0.3 contain multiple vulnerabilities that, when chained together, enable unauthenticated remote code execution RCE. id: CVE-2019-7194 info: name: QNAP Photo Station 6.0.3 - Remote Code Execution author: x-stp severity: critical description: | QNAP Photo...

Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization

A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. id: CVE-2025-5086 info: name: Dassault Systèmes DELMIA Apriso up to 2025 - Insecure Deserialization author: hacktronai,iamnoooob,pdresearch...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

Langflow AI <= 1.6.9 - CORS Misconfiguration

Langflow AI versions 1.6.9 and earlier are vulnerable to a CORS misconfiguration that allows any origin to make credentialed requests. Combined with SameSite=None cookies, this enables cross-origin token theft and subsequent remote code execution via the /api/v1/validate/code endpoint. id:...

FreePBX - Remote Code Execution

FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication. id: CVE-2025-57819 info: name: FreePBX - Remote Code...

WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option

The WP GDPR Compliance plugin allows unauthenticated users to execute any action and update any database value. This vulnerability is due to the lack of proper validation in the Includes/Ajax.php file. id: CVE-2018-19207 info: name: WP GDPR Compliance 1.4.3 - Unauthenticated Call Any Action or...

Sitecore Experience Platform - Deserialization of Untrusted Data

Sitecore Experience Platform before 8.2 Update-7 and 9.0 before Update-2 is vulnerable to a remote code execution vulnerability CVE-2019-9874. An attacker can exploit this issue to execute arbitrary code on the affected system via a crafted request to the...