CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX Response HTTP/1.1 20...

CVE-2018-10517

CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: 1. CMS Made Simple URL endpoint; 2. Cookie...

CVE-2017-12636

Couchdb Arbitrary Command Execution Vulnerability CVE-2017-12636...

CVE-2026-34990

CVE-2026-34990 Description CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on...

CVE-2022-22947-

CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expression injection command execution（CVE-2022-22947） Inject Godzilla memory shell Default key pass base64 Note: the code does not clear the route part, please clear it yourself.. Test environment:...

CVE-2021-31805

CVE-2021-31805 1.Introduction Struts2 Remote Command Execution Vulnerability CVE-2020-17530 & CVE-2021-31805 POC & EXP 2.Usage Parameter Introduction -u target url -m dnslog|exp //Default echo interface character check -n s2-062 //Default s2-061 -s windows //Default linux -p vulnerable parameter...

CVE-2017-1000117

CVE-2017-1000117 usage $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git when git has problem, ifconfig is executed...

dlink

Command Injection and Backdoor Account in D-Link NAS Devices Vulnerability Summary: The described vulnerability affects multiple D-Link NAS devices, including models DNS-340L, DNS-320L, DNS-327L, and DNS-325, among others. The vulnerability lies within the nassharing.cgi uri, which is vulnerable...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated Install Grab Repo $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Setup Note: Install the latest version of node $ npm init $ npm i axios cheerio yargs Usage ┌─✗─v37r1x@7h3B14ckKn1gh75─/Documents/Code/CVE-2023-26035 └──╼ $nod...

CVE-2024-4358

CVE-2024-4358 An Vulnerability detection and Mass Exploitation tool for CVE-2024-4358 Installation: git clone https://github.com/RevoltSecurities/CVE-2024-4358 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / / / | |// // / / / / / / / / / / / /...

CVE-2025-53547-POC

CVE-2025-53547 POC this is a poc for CVE-2025-53547 Chart.lock links test file to /tmp/1.txt /tmp/1.txt inject a command that create /tmp/2.txt In real product enviroment, you can change Chart.lock link file to inject any command you want such as: /root/.bashrc /root/.bashprofile /etc/profile...

ATutor-Instructor-Backup-Arbitrary-File

ATutor-Instructor-Backup-Exploit Exploit Title: ATutor 2.2.4 'Backup' Remote Command Execution CVE-2019-12170 Google Dork: inurl:/ATutor/login.php Date: 5/13/2019 Exploit Author: liquidsky Joseph McPeters Vendor Homepage: https://atutor.github.io/ Software Link:...

wp2shell

wp2shell Pre-authentication remote code execution for WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Chains CVE-2026-63030 batch route confusion SQLi with CVE-2026-60137 customizer changeset re-entry to achieve unauthenticated administrator creation and OS command execution. No password cracking required...

CVE-2026-39987

CVE-2026-39987 - marimo Terminal WebSocket Authentication Bypass poc Overview This repository contains CVE-2026-39987 affecting marimo versions before 0.23.0. The vulnerability exists in the terminal WebSocket endpoint, where insufficient authentication enforcement may allow an unauthenticated...

CVE-2022-25061

CVE-2022-25061 This script exploits a remote command execution vulnerability under the oalsetIp6DefaultRoute component in the TPLink WR840N router...

CVE-2021-21809

CVE-2021-21809 POC CVE details: A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities. In the belo...

rome-webshell

Rome WebShell A powerful and delightful PHP WebShell This is a lightweight PHP webshell , using only vanilla JavaScript and CSS, no jQuery/Bootstrap bloat. Features Fully interactive file explorer , browser directories and download files instantly Upload files directly from the browser Execute...

CVE-2021-4034-NoGCC

CVE-2021-4032-NoGCC Test in: Ubuntu 20.04.3 LTS Kali 2021.4a CentOS Linux release 7.5.1804 Use: 1:interactive shell ./cve-2021-4034-poc-x64 2:one-liner ./cve-2021-4034-poc-x64 "cat /etc/shadow"...

TOTOLINK Realtek SD Routers - Remote Command Injection

TOTOLINK Realtek SDK based routers may allow an authenticated attacker to execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI syscmd.htm is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0,...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the traceroute function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic...