Generic HTTP Command Execution

This module interacts with existing command execution functionality on a target system, where user-supplied input is directly passed to system execution functions via a HTTP request. This could be from an existing vulnerability, or uploaded webshells such as: It is likely that HTTP evasion option...

Exploit for CVE-2026-3055

CVE-2026-3055 - Security Vulnerability Severity: N/A CV...

repo

No d...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

A script for C...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 python script for exploiting CVE-2026-23744...

msfpro

msfpro 🔥 Lightweight Web Exploitation Framework for Bug Bou...

sqli

SQL Injection Write-up 🧪 1. Průzkum Do vyhledávacího pole...

Exploit for Eval Injection in Langflow

CVE-2026-33017: Unauthenticated RCE in Langflow Refer...

Exploit for Eval Injection in Langflow

CVE-2026-33...

Exploit for CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce = 1.5.0 - Unauthenticate...

security-research

Security Research & Vulnerability Proof-of-Concepts Welcome t...

📄 Generic HTTP Command Execution

This Metasploit module interacts with existing command execution functionality on a target system, where user-supplied input is directly passed to system execution functions via a HTTP request. This could be from an existing vulnerability, or uploaded webshells. It is likely that HTTP evasion...

Exploit for CVE-2026-29971

CVE-2026-29971 An attacker can execute arbitrary JavaScript in...

Exploit for CVE-2026-29971

CVE-2026-29971 An attacker can execute arbitrary JavaScript in...

Exploit for Code Injection in Apple Securerom

🔐 iOS Security Research Deep-dive notes on iOS security inter...

Exploit for CVE-2025-34037

CVE-2025-34037 Python port of the Linksys tmUnblock.cgi RCE ex...

Exploit for CVE-2025-52913

CVE-2025-52913 - MiCollab Path Normalization Vulnerability...

Exploit for Improper Neutralization of Script in Attributes in a Web Page in Paloaltonetworks Pan-Os

CVE-2025-4615 — Technical Analysis & Proof of Concept Vulne...

xss-payloads

xss...