58004 matches found
PoC-CVE-2019-12840
Exploit for CVE-2019-12840 in Webmin This repository contains a Python script that exploits the CVE-2019-12840 vulnerability in Webmin. Description The script attempts to log in to a Webmin server and then exploit the CVE-2019-12840 vulnerability. The script accepts several command-line arguments...
CVE-2017-11882-exp
CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ salute, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...
the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt
CVE-2026-71960 — Hard-coded JWT Secret in Cudy WR3000 2.0 Mesh MQTT Broker PoC tooling for the Hunt-Benito article "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...
cve-2026-26114-poc
CVE-2026-26114 Use only in labs or authorized testing systems. Python PoC pip install requests requests-ntlm python poc/cve202626114rce.py ^ --target http://sharepoint.local ^ --username spuser1 ^ --password "Password123!" ^ --domain SP19 ^ --cmd "cmd /c whoami C:\Windows\Temp\cve202626114.txt" Y...
CVE-2022-26134
CVE-2022-26134 Installation 下载py,本地cmd运行 Usage poc python3 CVE-2022-26134.py -u http://www.xxx.com exp python3 CVE-2022-26134.py -u http://www.xxx.com -c id Disclaimer🧐 This tool is only intended for legally authorized enterprise security construction activities. If you need to test the usability...
CVE-2023-34960
ChamiloCVE-2023-34960-EXP Help: usage: CVE-2023-34960.py -h -u URL -f FILE -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Full URL address http/https -f FILE, --file FILE Batch URL file -c COMMAND, --command COMMAND Execute command, optional Examples: Single URL...
vsftpd-backdoor
Exploit for the vsftpd 2.3.4 Backdoor CVE-2011-2523 This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server How it works The backdoor is...
CVE-2026-95675
CVE-2026-95675 — D-Link DAP-1360 RevB Unauthenticated remote root command execution CWE-78 — OS Command Injection in the formSystemCheck handler, reachable via a hardcoded authentication backdoor. Verified against DAP-1360 RevB, firmware 2.14B05. Root Cause Two independent issues chained: 1...
CVE-2017-10271
CVE-2017-10271 CVE-2017-10271 Command execution with echo back Direct shell upload Tested OK on WebLogic 10.3.6.0 on Linux Usage and Parameters python weblogicwlswsatexp.py -t IP:7001 usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this help...
Follina_Exploiter_CLI
Follina Exploiter CLI Tool MSDT Vulnerability CVE-2022-30190 A Command Line based python tool for exploit Zero-Day vulnerability in MSDT Microsoft Support Diagnostic Tool also know as 'Follina' CVE-2022-30190. Info : New Microsoft Office zero-day used in attacks to execute PowerShell Made In...
CVE-2025-32433
CVE-2025-32433 – Erlang/OTP SSH RCE Vulnerability 📌 Summary CVE-2025-32433 is a remote code execution RCE vulnerability affecting the Erlang/OTP SSH daemon. The root cause is improper handling of pre-authentication SSH channel requests which can be crafted by an attacker to cause arbitrary comman...
CVE-2024-3400
CVE-2024-3400 Vulnerability Description The CVE-2024-3400 vulnerability is a security vulnerability that affects PAN-OS firewalls in versions 10.2, 11.0, and 11.1. This vulnerability is exploited when GlobalProtect gateway and device telemetry configurations are enabled. An attacker can leverage...
CVE-2022-25060
CVE-2022-25060 This script exploits a remote command execution vulnerability under the oalstartPing component in the TPLink WR840N router...
CVE-2018-6574
CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...
CVE-2018-17431-Comodo
CVE-2018-17431-PoC Proof of consept for CVE-2018-17431 Exploit Title: Comodo Firewall & Central Manager UTM All Release before 2.7.0 & 1.5.0 Remote Command Execution Web Shell based Exploit Author: Milad Fadavvi Vendor Homepage: https://www.comodo.com/ Software Link:...
CVE-2025-5840
CVE-2025-5840 CVE-2025-5840 Exploit In Python By hax / haxerr9 How To Use: Make sure Python3 is installed at system. Run "python3 CVE-2025-5840.py URL -c COMMAND". Don't forget to give it parameters before running the script. Example Use: NOT TESTED This exploit is not tested in a lab environment...
CVE-2025-56803
CVE-2025-56803 OS Command Injection Vulnerability via Plugin Execution in Figma Desktop Application 1. Overview Application : Figma Desktop Application Version : 125.6.5 Vendor : Figma, Inc. CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' CVS...
CVE-2025-7775-vulnerable-lab
CVE-2025-7775 Vulnerable Lab This repository provides a vulnerable setup to test nuclei template for CVE-2025-7775. Run docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app Vulnerability Tests 1. Remote Command Execution RCE curl -X POST...
CVE-2017-11882
CVE-2017-11882 Original script from https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...