-CVE-2011-2523

-CVE-2011-2523 This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules How to install ? Install dependencies : pip3 install termcolor argparse Git cloning the project git clone...

CVE-2024-42448-RCE

CVE-2024-42448-RCE Veeam Service Provider Console VSPC remote code execution. Download link here Details: is a critical vulnerability identified in the Veeam Service Provider Console VSPC with a CVSS score of 9.9. This vulnerability allows for remote code execution RCE. About: files.zip here you'...

CVE-2018-1133-Exploit

CVE-2018-1133-Exploit This repository contains a python exploit script for the Moodle Evil Teacher exploit CVE-2018-1133. Usage usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and exit -u URL, --url URL Target URL -l...

CVE-2021-22986

CVE-2021-22986 This vulnerability allows for unauthenticated attackers with network access to the iControl REST interface, through the BIG-IP management interface and self IP addresses, to execute arbitrary system commands, create or delete files, and disable services. This vulnerability can only...

Gorsair

Gorsair Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers. Once it has access to the docker daemon, you can use Gorsair to directly execute commands on remote containers. Exposing the docker API on the internet is a tremendo...

CVE-2023-38646

CVE-2023-38646 - Metabase RCE Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1...

Jmeter-CVE-2018-1297-

Jmeter RMI Deserialization Command Execution Vulnerability CVE-2018-1297 Apache JMeter is an open-source software suite written in Java by the American Apache Software Foundation for stress testing and performance testing. Versions 2.x and 3.x contain a deserialization vulnerability that allows a...

CVE-2023-38831

CVE-2023-38831 Installation Vagrant 2.4.0 vagrant up...

CVE-2021-32156

..| CSRF to RCE CRON |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's Scheduled Cron Jobs feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

CVE-2019-16113-Bludit-3.9.2-RCE

CVE-2019-16113 Bludit 3.9.2 Remote Command Execution RCE...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

CVE-2024-39943-Poc

CVE-2024-39943-Poc CVE-2024-39943 rejetto HFS aka HTTP File Server 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users if they have Upload permissions. This occurs because a shell is used to execute df i.e., with execSync instead of spawnSync in...

CVE-2026-39987

CVE-2026-39987 - marimo Terminal WebSocket Authentication Bypass poc Overview This repository contains CVE-2026-39987 affecting marimo versions before 0.23.0. The vulnerability exists in the terminal WebSocket endpoint, where insufficient authentication enforcement may allow an unauthenticated...

CVE-2017-11882

CVE-2017-11882 Original script from https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...

CVE-2010-2075-UnrealIRCd-3.2.8.1

CVE-2010-2075 Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1. Requirements optparse, signal Usage You can send a command to execute, but there will be times when it will not respond, but you can simply send a reverse shell and wait for it to arrive...

CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass

CVE-2019-6340 / SA-CORE-2019-003 Three scripts included to demonstrate how Drupal 8.6.9 is vulnerable to CVE-2019-6340: createnodeviarest.py - Example of normal authenticated node create with REST API doesnotcorrespond.py - Proving the request is processed even without authentication exploit.py -...

Vedo Suite 1.2.5 SQL Injection

Vedo Suite version 1.2.5 contains an authenticated SQL injection issue in its chat API endpoint that may permit operating-system command execution through an enabled SQL Server xpcmdshell configuration...

Linux Distros Unpatched Vulnerability : CVE-2026-110642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792217772)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792217772 advisory. - vim is vulnerable to Use After Free CVE-2021-4187 - Vim is an open source, command line text editor. Prior to 9.2.0845,...

Linux Distros Unpatched Vulnerability : CVE-2026-96893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...