CVE-2026-48711

A flaw was found in SSHFS, a network filesystem client. An attacker can exploit this vulnerability by providing a specially crafted mount source that includes argument delimiters. This improper handling of the mount source allows for argument injection, leading to the execution of arbitrary...

CVE-2019-11043

PoC CVE-2019-11043 A Python version of the CVE-2019-11043 exploit https://github.com/neex/phuip-fpizdam This PoC is still a draft, please use the exploit written by @neex Vulnerability Analysis: https://paper.seebug.org/1064/ PoC Setup Just run docker compose to bring up nginx and php-fpm:...

CVE-2018-10517

CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: 1. CMS Made Simple URL endpoint; 2. Cookie...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Nexus Repository Manager 2.x Remote Command Execution Vulnerability】 Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...

CVE-2021-3060

CVE-2021-3060 POC/ Exploit Description: An OS command injection vulnerability in the Simple Certificate Enrollment Protocol SCEP feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root us...

CVE-2022-28171-POC

CVE-2022-28171-POC I originally published this on ExploitDB, which you can find at https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link:...

CVE-2000-0114

CVE-2000-0114 This a CVE I found it in VDP at hackerone Platform Steps to POC :- 1 - install " pip install CVE-2000-0114 " 2 - run " CVE-2000-0114 -u https://example.com " 3 - or you can run script...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://kushagraojha.medium.com/vmware-vrealize-network-insight-cve-2023-20887-193f3c3d30a0...

CVE-2024-50603

CVE-2024-50603: Aviatrix Controller Unauthenticated Command Injection CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-50603 with Asychronous Performance. Installation git clone https://github.com/th3gokul/CVE-2024-50603.git cd CVE-2024-50603 pip install -r...

CVE-202122986-EXP

F5 BIG-IP Remote Command Execution Vulnerability CVE-2021-22986 Affected Versions F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC POST /mgmt/tm/util/bash HTTP/1.1...

clif

clif clif is a command-line interface CLI application fuzzer, pretty much what wfuzz or ffuf are for web. It was inspired by sudo vulnerability CVE-2021-3156 and the fact that for some reasons, Google's afl-fuzz doesn't allow for unlimited argument or option specification. Usage clif -e -w , -n -...

cve-2025-49844

CVE-2025-49844 Мое личное доказательство концепции для CVE-2025-49844, также известного как RediShell. Поддерживаемые целевые сборки: x86-64 Linux redis:8.2.1-alpine Docker image x86-64 Linux redis:8.2.1-bookworm Docker image Это немного коряво, вероятно, не так хорошо, как у Wiz Research. Тем не...

winrar_CVE-2023-38831_lazy_poc

winrarCVE-2023-38831lazypoc lazy way to create CVE-2023-38831 winrar file for testing Article that mentioned this vuln and the sample: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ version of winrar i was using is winrar 5.91.0 I took a malicious winrar file...

CVE-2024-38856-EXP

CVE-2024-38856-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt or nuclei -id CVE-2024-23692 -o CVE-2024-23692-result.txt...

CVE-2022-39073

CVE-2022-39073 Détails du firmware : wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prérequis requests pip install requests Injection de commande La vulnérabilité est une injection de commande partagée entre le binaire ztenetlinkdetect et le gestionnaire...

CVE-2018-1000006-DEMO

CVE-2018-1000006-DEMO The Demo for CVE-2018-1000006 Analysis Electron v1.8.2-beta.4 Remote Command Execution Vulnerability —【CVE-2018-1000006】 POC You can directly use elecrce\elecrce-win32-x64\elecrce.exe You can also package it yourself into an exe application to generate a vulnerable version...

cve-2025-11953-vulnerability-demo

React Native CLI Command Injection Demo CVE-2025-11953 ⚠️ VULNERABILITY DEMONSTRATION ⚠️ JFSA-2025-001495618 - Critical Command Injection in React Native CLI CVE : CVE-2025-11953 CVSS Score : 9.8 Critical Affected Package : @react-native-community/cli-server-api Vulnerable Versions : 4.8.0, 20.0.0...

CVE-2022-30023

CVE-2022-30023 Authenticated Command Injection on Tenda HG9 Router Usage git clone https://github.com/Haniwa0x01/CVE-2022-30023 cd CVE-2022-30023 python exploit.py -u http://target -U "user" -P "password" Example pc@pc-note:/CVE-2022-30023/$ python3 exploit.py -u "http://10.0.0.1" -U "admin" -P...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT Deserialization - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669 is a GoAnywhere MFT deserialization vulnerability. Due to the deserialization of an arbitrary attacker-controlled object, a pre-authenticated command injection vulnerability exists in the License Response...