CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 Optimized POC, no longer a one-time validation Warning: This program will destroy log information integrity, please back up server data! Use only if you have server penetration test authorization! pocsuite -r CVE-2022-22965POCEXP.py -u url As shown below, the progr...

CVE-2024-29375

CSV-Injection-PoC CSV Injection in Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Impact Score: 5.3, Exploitation Score: 1.3 Affected Components: Project Description, Identifiers, Custom Triangle Name inside Input Triangles and Yield Curve Name parameters Screenshot 1:...

CVE-2022-36804

CVE-2022-36804 Bitbucket RCE 2022 This repo is part of the hgrab-framework dork title: "Public Repositories - Bitbucket" Affected product - Bitbucket Server and Data Center 7.6 prior to 7.6.17 - Bitbucket Server and Data Center 7.17 prior to 7.17.10 - Bitbucket Server and Data Center 7.21 prior t...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 is an encrypted remote administration and C2 framework designed exclusively for educational use, security research, and controlled laboratory environments. The project demonstrates how to build a custom command-and-control server with application-layer...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

CVE-2026-39987_RCE_PoC

CVE-2026-39987 — Marimo WebSocket RCE PoC Proof of Concept for CVE-2026-39987 , demonstrating remote command execution through the vulnerable WebSocket terminal endpoint. Disclaimer: This PoC is intended for authorized security testing and educational use only. Use it only against systems you own...

CVE-2021-21300

CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Use DNSlog for vulnerability verification of CVE-2021-26295. Poc usage: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot properly generate the payload exp: python exp.py https://baidu.com then enter th...

ThinkAdmin-CVE-2020-25540

ThinkAdmin-CVE-2020-25540 ThinkAdmin CVE-2020-25540 POC Usage $ python3 exploit.py -t -c...

CVE-2022-29078

CVE-2022-29078 Simple PoC for CVE-2022-29078 vuln ejs 3.1.6 Usage git clone https://github.com/chuckdu21/CVE-2022-29078.git cd CVE-2022-29078 python3 CVE-2022-29078.py A prompt will appear to execute commands $ id uid=0root gid=0root groupes=0root...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 This repo is part of the hgrab-framework dork title: "Zimbra Web Client Sign In" Affected product Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 and earlier Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 and earlier Installation Install the ap...

CVE-2012-2982-Webmin-Exploit

Webmin 1.590 Remote Command Execution Exploit CVE-2012-2982 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2012-2982 , a remote authenticated command execution vulnerability affecting Webmin versions 1.590 and earlier. The vulnerability resides in the /file/show.cgi...

goldig

Project moved to github.com/rtfmkiesel/goldig goldig Execute commands on Windows via DNS records. This utility will create a DNS server and serve a malicious TXT record. Just copy & paste the command from the console output into your Windows shell. Usage usage: goldig OPTIONS Options: -i Interfac...

CVE-2022-24715

Icinga Web 2 - Authenticated Remote Code Execution 2.8.6, 2.9.6, 2.10 Remote command execution Reverse shell Usage usage: exploit.py -h -u URL -U USER -P PASSWORD -i IP -p PORT Welcome. options: -h, --help show this help message and exit -u URL, --url URL Insert URL http://ipvictima -U USER, --us...

CVE-2025-24813

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-24813, vulnerability in Apache Tomcat. The script has been modified based on the related link and tailored to my needs. Setup Vulnerable Tomcat Environment Given environment based on the official Tomcat 9.0.90 image. It removes the server's...

Samba-CVE-2007-2447-Exploit

Samba CVE-2007-2447 Exploit This is a Python script for exploiting CVE-2007-2447, a vulnerability known as 'Username' map script command execution in the Samba server. Description This exploit is developed to target Samba versions 3.x - 4.x. CVE-2007-2447 allows an attacker to execute arbitrary...

rome-webshell

Rome WebShell A powerful and delightful PHP WebShell This is a lightweight PHP webshell , using only vanilla JavaScript and CSS, no jQuery/Bootstrap bloat. Features Fully interactive file explorer , browser directories and download files instantly Upload files directly from the browser Execute...

Apollo

Apollo A simple, lightweight Remote Access Tool written in Python Apollo is a cross-platform Windows, Linux, FreeBSD & MacOS Remote Access Tool for Python 3.4+. Its features are currently very basic but allow for post-exploitation remote code execution as well as obtaining information on the clie...