CVE-2023-23488-PoC

CVE-2023-23488-PoC Unauthenticated SQL Injection - Paid Memberships Pro 2.9.8 WordPress Plugin Running this script against a WordPress instance with Paid Membership Pro plugin tells you if the target is vulnerable. As the SQL injection technique required to exploit it is Time-based blind, instead...

CVE-2026-58138

CVE-2026-58138 — Conductor 3.21.21..3.30.2 Ejecución Remota de Código no Autenticada Vulnerabilidad crítica de ejecución remota de código en Orkes Conductor 📋 Resumen CVE-2026-58138 es una vulnerabilidad crítica de ejecución remota de código RCE no autenticada que afecta a Orkes Conductor en las...

CVE-2026-14459-14460-pardus-software

Centro de Software de Pardus — Escalada de Privilegios Local CVE-2026-14459 y CVE-2026-14460 Código de prueba de concepto y listo para explotación de dos problemas de escalada de privilegios locales en el paquete pardus-software Centro de Software de Pardus versión 1.0.4 , ambos corregidos en...

cobaltstrike-headless

Headless Strike Aggressorscript que convierte el cliente headless de Aggressor en un cliente de Cobalt Strike mayormente funcional. Uso conéctate a tu teamserver mediante la utilidad headless aggressor integrada ./agscript ./agscript host port user password carga el archivo .cna aggressor load...

vankyo-s30-bootloader-unlock

Vankyo S30 Bootloader Unlock Unlock the bootloader on a Vankyo MatrixPad S30 Unisoc SC9863A using the CVE-2022-38694 FDL1 method. The S30's BootROM accepts unsigned FDL1 in download mode without requiring the ROP bypass, which simplifies the unlock significantly. Quick Start ./unlock.sh --prebuil...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

CVE-2025-11391

Unauthenticated Blind SQL Injection in PPOM for WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res; An unauthenticated attacker can exploit this by crafting a malicious payload and injecting it into the ppomfieldsid parameter when adding ...

Blind-SSRF-CVE-2020-15002

概述 AddFileAction.getImageDataFromUrl 中用于在处理 /appsuite/api/oxodocumentfilter&action=addfile 时从外部URL获取图片的逻辑（实现在此）仅在遵循所有重定向后才验证重定向的URL。 response = httpClient.executegetRequest, context; int statusCode = response.getStatusLine.getStatusCode; if statusCode == HttpStatus.SCOK List locations =...

CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE-

CVE-2025-49132 Panel Pterodactyl - Ejecución Remota de Código No Autenticada RCE 🔎 Resumen CVE‑2025‑49132 es una vulnerabilidad crítica de Ejecución Remota de Código que afecta a Pterodactyl Panel --cmd "" --path Ejemplos python3 CVE-2025-49132-dbs.py --target victim.com --cmd "whoami" python3...

cve-2024-3400

cve-2024-3400 CVE-2024-3400 Palo Alto 命令注入与任意文件创建的Python利用和检查脚本 usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploit module of script check Vulnerability check module of script options: -h...

cve-2024-32019-PoC

CVE-2024-32019 — Netdata ndsudo Local Privilege Escalation Summary Netdata’s ndsudo helper installed setuid root restricts which commands it will run, but resolves those commands using the caller’sPATH. In impacted versions, a local user can place a malicious binary earlier in PATH and have ndsud...

Exploit for CVE-2026-61500

CVE-2026-61500: Rejetto HFS session forgery to RCE !Real ter...

CVE-2025-3248

CVE-2025-3248 漏洞利用工具文档 简介 本工具用于利用 CVE-2025-3248 漏洞（基于Python的代码注入漏洞），通过构造恶意payload实现目标服务器的远程命令执行（RCE）。该漏洞存在于某Web应用的API接口中，攻击者可利用未验证的代码执行点注入任意Python代码。 重要提示： 本工具仅用于授权安全测试，未经授权的渗透测试可能违反法律。请确保您拥有目标系统的明确授权。 功能特点 ✅ 通过/api/v1/validate/code接口注入恶意Python代码 ✅ 支持执行任意系统命令（如whoami、ls等） ✅ 自定义超时时间（默认10秒） ✅...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ 和 OpenWire 1 Apache ActiveMQ 与 OpenWire 概述 ActiveMQ 是一个开源的消息传递和集成模式服务器，它包含支持 JMS 的代理（Broker），不仅可以在 Java 环境中使用，还能够实现使用多种语言的系统之间的通信。此外，通过集群功能、数据库以及文件系统，它维护了各系统之间的一致性和持久性。 OpenWire 是 Apache ActiveMQ 使用的一种二进制消息协议。它专为代理（ActiveMQ）与客户端之间的高效数据传输而设计。 CVE-2023-46604 是...

FiberBreak

FiberBreak Marco de explotación para CVE-2025-55182 React2Shell - vulnerabilidad crítica de RCE en React Server Components. Resumen CVE : CVE-2025-55182 CVSS : 10.0 CRÍTICA Tipo : Ejecución remota de código RCE Afectados : React 19.0.0-rc.0 a 19.0.0, Next.js 15.0.0 a 15.0.3 Descubrimiento : Lachl...

CVE_2018_16763_Proof_of_Concept

CVE-2018-16763 Prueba de concepto Un exploit de prueba de concepto PoC para CVE-2018-16763 Fuel CMS - Ejecución remota de código sin autenticación previa. Descripción Este programa en Python 3 sirve como PoC para la vulnerabilidad CVE-2018-16763 en el sistema de gestión de contenidos Fuel CMS...

CVE-2026-97160

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2025-65731

CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...

CVE-2024-2054

CVE-2024-2054 Aplicación web administrativa de Artica-Proxy: deserialización insegura RCE Una prueba de concepto de exploit para la aplicación web administrativa ARTICA PROXY CVE-2024-2054 Entrada del blog Más detalles aquí:...

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400- Introduction CVE‑2024‑3400 is a critical CVSS 10.0 command‑injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN‑OS, first disclosed on April 12, 2024 github.com+10 Investigatio...