192175 matches found
CVE-2026-90865 Command Injection via FTP Notification Variables in Progress WS_FTP Server
An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations...
CVE-2026-90865
Progress Software WS_FTP Server on Windows is vulnerable to an OS command injection vulnerability in versions prior to 2024.0.7 and 2025.0.4 . The flaw exists in FTP Notification Variables , which could allow an attacker to execute arbitrary commands with elevated privileges under specific config...
EUVD-2026-113022
An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations...
CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE
Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...
EUVD-2026-113020
Missing authorization in the administrative interface of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and...
CVE-2026-90863
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows are vulnerable to a missing authorization flaw in the administrative interface. This flaw could allow a delegated Host Administrator to exceed their authorized scope, potentially leading to arbitrary command execut...
CVE-2026-90863 Privilege Escalation via Missing Authorization in WS_FTP Manager
Missing authorization in the administrative interface of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and...
eximrce-CVE-2019-10149
eximrce Simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /root/lweximtest. Output will be slow depending on server's reply and not knowing how to properly use python's socket module. Would love a lesson on how to speed it up. Only...
FollinaXploit
Follina Exploiter CLI Tool MSDT Vulnerability CVE-2022-30190 A Command Line based python tool for exploit Zero-Day vulnerability in MSDT Microsoft Support Diagnostic Tool also know as 'Follina' CVE-2022-30190. Info : New Microsoft Office zero-day used in attacks to execute PowerShell Made In...
apfell-chrome-extension-c2server
apfell-chrome-extension-c2server Apfell C2 Server for the Google Chrome Extension Payload Find the latest version of the chrome extension C2 server in the Apfell framework here: https://github.com/its-a-feature/Apfell...
CVE-2023-6895
python3 CVE-2023-6895.py -u http://target.com -c cmd...
retire.js
Retire.js Retire Status What you require you must also retire There are a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development, but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now ...
CVE-2026-28363
๐ด CVE-2026-28363 โ Security Advisory โโโโโโโโโโ โโโโโโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโโโโ โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโ โโโ โโโ โโโโโโโโโ โโโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโ โโโ โโโโ โโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโโ โโโโโโโโโ โโโโโโโโ โโโโโโโ โโโโโโโโ...
CVE-2016-5640
CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit Module Module for exploiting a Remote Command Injection vulnerability in the wireless diagnostics page for Crestron AirMedia AM-100 devices with a firmware version 1.4.0.13. Commands execute as the account running the service i.e...
CVE-2020-15778
CVE-2020-15778 Introduction This repo reproduces CVE-2020-15778. Steps 1. Build the docker images for scp server and client cd client docker build -t client-cve . cd server docker build -t server-cve . 2. Spin up the scp server in container. docker run -d -P --name scp-server server-cve Retrieve...
CVE-2022-22947
CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" ๅ ่ดฃๅฃฐๆ ๆญคๅทฅๅ ทไป ็จไบๅญฆไน ใ็ ็ฉถๅ่ชๆฅใไธๅบๅฐๅ ถ็จไบ้ๆณ็ฎ็ใไฝฟ็จๆฌๅทฅๅ ทไบง็็ไธๅ้ฃ้ฉไธๆๆ ๅ ณ๏ผ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...
CVE-2026-34940
CVE-2026-34940 โ OS Command Injection in KubeAI via Model URL in Ollama startup probe Severity : High CVSS 8.7 CWE : CWE-78 โ Improper Neutralization of Special Elements used in an OS Command Affected : github.com/kubeai-project/kubeai = 0.23.1 Fixed in : 0.23.2 Advisory : GHSA-324q-cwx9-7crr NVD...
CVE-2019-15107
CVE-2019-15107 This repo contains a small script in bash to exploit CVE-2019-15107 without using metasploit. Use is pretty straightforward, just download and execute, no dependencies root@kali: ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a' Error - Perl execution failed Your password has...
CVE-2022-30525
CVE-2022-30525 Zyxel Firewall Remote Command Injection Vulnerability CVE-2022-30525 Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Usage python3 CVE-2022-30525.py -u http://127.0.0....
CVE-2020-0688-GUI
ไธใProject Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...