CVE-2022-25060

CVE-2022-25060 This script exploits a remote command execution vulnerability under the oalstartPing component in the TPLink WR840N router...

CVE-2019-19781

CVE-2019-19781 Simple POC to test if your Citrix ADC Netscaler is vulnerable to CVE-2019-19781 Usage : python This is proxified by default on tor default port -- 127.0.0.1:9050 You'll need PySocks, requests and urllib3 Security advisory https://support.citrix.com/article/CTX267027...

-CVE-2011-2523

-CVE-2011-2523 This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules How to install ? Install dependencies : pip3 install termcolor argparse Git cloning the project git clone...

CVE-2022-22954

Multi-vulnerability trigger point detection, multi-threaded batch detection, command execution, file writing // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution python CVE-2022-22954.py -u https://x.x.x.x -c "id" // Write file python...

CVE-2024-7954

CVE-2024-7954 This exploit will attempt to execute system commands on SPIP targets CVE-2024-7954. Overview This is a bulk scanning and exploitation tool for CVE-2024-7954: SPIP 4.2.8 allows unauthenticated attackers to launch RCE on SPIP targets. This tool is based on this Security Research. How ...

CVE-2018-6574

CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

FollinaXploit

Follina Exploiter CLI Tool MSDT Vulnerability CVE-2022-30190 A Command Line based python tool for exploit Zero-Day vulnerability in MSDT Microsoft Support Diagnostic Tool also know as 'Follina' CVE-2022-30190. Info : New Microsoft Office zero-day used in attacks to execute PowerShell Made In...

SharpStrike

SharpStrike SharpStrike is a post-exploitation tool written in C that uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command...

SNOWCRASH

SNOWCRASH A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user in this case combined Bash and Powershell code is embedded into a single polyglot template, which is platform-agnostic. There are fe...

CVE-2026-34048

CVE-2026-34048 Admin-only terminal bootstrap routes checked only for login state, which let a normal team member drive Coolify's realtime terminal backend and execute commands on team servers. Intro I found this issue while reviewing Coolify , an open-source self-hosted PaaS, with a very direct...

CVE-2018-14667

CVE-2018-14667 env the rich.ser can open the Calculator.app only MacOs download this project. the poc program in web-inf/src/Main.java...

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...

CVE-2025-55182-POC

CVE-2025-55182 – Command Injection Vulnerability Scanner Full Proof-of-Concept With Real Command Output This repository contains a Python-based proof-of-concept PoC scanner for CVE-2025-55182, demonstrating how an attacker could exploit a command injection vulnerability through a JSON-based POST...

cve-2018-1002105

This was modified from https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/. All credit goes to the kind folks at Gravitational. The original PoC code was modified to go a bit beyond checking for vulnerability and to actually run a command inside the first container...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection A vulnerability, which was classified as very critical, was found in Vmware Workspace ONE Access and Identity Manager. Affected component is Template Handler. Reference: https://vuldb.com/?id.196644 Usage:...

CVE-2020-0688_EXP

CVE-2020-0688EXP CVE-2020-0688EXP Auto trigger payload python3 CVE-2020-0688EXP.py -h usage: CVE-2020-0688EXP.py -h -s SERVER -u USER -p PASSWORD -c CMD -e optional arguments: -h, --help show this help message and exit -s SERVER, --server ECP Server URL Example: http://ip/owa -u USER, --user USER...

CVE-2026-47323

camel-cxf-rest / camel-cxf / camel-knative-http Header Injection Reproducer CVE-2026-47323 This project demonstrates a message-header injection in Apache Camel's CXF and Knative HTTP header-filter strategies, tracked as CVE-2026-47323. CxfRsHeaderFilterStrategy camel-cxf-rest,...

CVE-2020-9484

This tool is only for security research and internal audits. Using this tool to launch illegal attacks is prohibited. The user shall be responsible for any consequences. This tool is only for security research and internal audits. Using this tool to launch illegal attacks is prohibited. The user...

CVE-2021-27877-PoC

CVE-2021-27877 Proof of Concept This repository contains a modified version of the original Rapid7 Metasploit module for CVE-2021-27877 affecting the Veritas Backup Exec Agent. During my testing, the original Metasploit module successfully identified the target as vulnerable but consistently fail...