CVE-2024-23108

CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances Blog Post Root cause and indicators of compromise here:...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...

CVE-2021-3317

Información Título del Exploit: Klog Server 2.4.1 - Inyección de Comandos Autenticado Fecha: 26.01.2021 Autor del Exploit: Metin Yunus Kandemir Página del Proveedor: https://www.klogserver.com/ Versión: 2.4.1 Descripción:...

shellshock-poc-cve-2014-7169

CVE-2014-6271 - Shellshock PoC Summary CVSS 10.0. Bash improperly parses trailing commands after a function definition stored in an environment variable, executing them during shell initialization. Root cause Bash environment variables can encode function definitions: x=' :; ' When bash imports...

CVE-2022-46196

CVE-2022-46196 Descripción Este código Python explota una vulnerabilidad de inyección de comandos no autenticada en versiones de Cacti hasta la 1.2.22 inclusive. Utiliza argparse para analizar argumentos de la línea de comandos, requests para obtener el contenido HTML de una instancia objetivo de...

CVE-2023-34960

CVE-2023-34960 Inyección masiva de comandos no autenticados Chamilo Captura de pantalla Requisitos Python3.7+ Sistemas operativos compatibles Linuxer Wingays Para empezar $ git clone https://github.com/Pari-Malam/CVE-2023-34960 $ cd CVE-2023-34960 $ pip/pip3 install -r requirements.txt $...

CVE-2018-10562

CVE-2018-10562 CVE-2018-10562 exploit Acerca de RCE en routers domésticos GPON CVE-2018-10561:Bypass de autenticación CVE-2018-10562: Inyección de comandos Dependencias requeridas requests urllib2 ssl re Capturas de pantalla...

CVE-2024-23108

CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...

ivanti-CVE-2024-21887

ivanti-CVE-2024-21887 POC Checker for ivanti CVE-2024-21887 Command injcetion...

CVE-2024-7120

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

CVE-2022-30525

CVE-2022-30525 A OS Command Injection Vulnerability in the CGI Program of Zyxel Executive Summary The vulnerability, first discovered on April 13, 2022, caused remote code execution in Zyxel firewall products. This important vulnerability with a CVSS score of 9.8 was blocked with the update...

CVE-2023-39362-cacti-snmp-command-injection-poc

Vulnerabilidad de inyección de comandos en Cacti CVE-2023-39362 - PoC Este repositorio es un fork de este repositorio: https://github.com/m3ssap0/cacti-rce-snmp-options-vulnerable-application Cacti es un framework de monitoreo operativo y gestión de fallos de código abierto, en constante evolució...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . This has produced the best results during testing. Newlines in the payload are replaced with spaces before upload. ================== Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...

CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX Response HTTP/1.1 20...

CVE-2019-1653

CVE-2019-1653 A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. Script python sederhana ini merupakan automation exploit pada CVE-2019-1653...

poc-rebar3

Rebar3 shell injection CVE-2020-13802 Proof of concept git clone https://github.com/vulnbe/poc-rebar3.git cd poc-rebar3 rebar3 clean Credit Alexey Pronin @vulnbe References Rebar3 vulnerability analysis Vulnerability remediation PR CVE-2020-13802 CWE-78: Improper Neutralization of Special Element...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 Authenticated RCE Through Malicious Configuration File Upload CVE-2018-19537 Description An authenticated remote code execution RCE vulnerability exists in all published firmware versions for the TP-Link Archer C5 router. By uploading a maliciously crafted configuration file, an...

CVE-2019-0232-EXP

CVE-2019-0232-EXP Test environment: Win10 Home 1809, jre version 18.3 build 10.0.2+13, Tomcat version 9.0.13. Affected Tomcat Versions ★Apache Tomcat 9.0.0.M1 to 9.0.17 ★Apache Tomcat 8.5.0 to 8.5.39 ★Apache Tomcat 7.0.0 to 7.0.93 Configuration conf/web.xml cgi...

CVE-2020-24572-POC

CVE-2020-24572-POC Se descubrió un problema en includes/webconsole.php en RaspAP 2.5. Con acceso autenticado, un atacante puede usar una consola web mal configurada y prácticamente sin restricciones para atacar el sistema operativo subyacente que ejecuta este software, y ejecutar comandos en el...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/ Summary...