292900 matches found
WD My Cloud Auth Bypass RCE (CVE-2018-17153)
Chains CVE-2018-17153 admin session creation networkmgr.cgi cgigetipv6 flag=1 with authenticated command injection in googleanalytics.php cloud-device-num argument. Affects My Cloud before firmware 2.30.196. !/usr/bin/env python3 -- coding: utf-8 -- """Western Digital My Cloud auth bypass + comma...
Fortinet FortiWeb - Authentication Bypass Detection (CVE-2025-64446)
CVE-2025-64446: relative path traversal on /api/v2.0/cmdb/system/admin allows unauthenticated attackers to reach cgi-bin/fwbcgi and invoke administrative APIs. !/usr/bin/env python3 -- coding: utf-8 -- """FortiWeb unauthenticated auth bypass via path traversal CVE-2025-64446.""" import base64...
Repetier-Server Directory Traversal File Read (CVE-2023-31059)
CVE-2023-31059 in Repetier-Server through 1.4.10: encoded ..\ traversal via /views.../base/connectionLost.php reads local files such as ProgramData/Repetier-Server/database/user.sql credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Repetier-Server directory traversal arbitrary file read...
Ncast busiFacade Command Injection RCE (CVE-2024-0305)
Exploits CVE-2024-0305 in Ncast Yingshi recording system busiFacade.php: unauthenticated JSON param array reaches shell execution. !/usr/bin/env python3 -- coding: utf-8 -- """Ncast busiFacade unauthenticated command injection CVE-2024-0305.""" from future import annotations import json import re...
Control Web Panel - Command Injection Detection (CVE-2025-48703)
CVE-2025-48703: unauthenticated POST to //index.php?module=filemanager&acc=changePerm with shell metacharacters in ttotal chmod argument allows OS command execution when a valid non-root username is known. !/usr/bin/env python3 -- coding: utf-8 -- """CWP unauthenticated command injection in...
Control Web Panel changePerm Command Injection RCE (CVE-2025-48703)
Exploits CVE-2025-48703 in CentOS Web Panel / Control Web Panel before 0.9.8.1205: unauthenticated POST to //index.php?module=filemanager&acc=changePerm injects shell metacharacters via the ttotal chmod parameter. Opens a command-execution session. !/usr/bin/env python3 -- coding: utf-8 --...
Drupal 7 elFinder Connector Upload RCE
Uploads a PHP webshell through the exposed elFinder connector.php Drupal 7 sites/all/libraries/elfinder and runs commands via GET. Companion to public PoCs Kro0oz/drupal-7-elfinder. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal 7 elFinder connector.php unauthenticated PHP upload RCE.""" fro...
WAGO WBM Command Injection RCE (CVE-2023-1698)
Exploits CVE-2023-1698 in the WAGO web-based management legal-information plugin: unsanitized JSON package field passed to shellexec on /wbm/plugins/wbm-legal-information/platform/pfcXXX/licenses.php. !/usr/bin/env python3 -- coding: utf-8 -- """WAGO WBM licenses.php unauthenticated command...
QNAP QTS - CVE-2022-27596 Exposure Detection
Detects QNAP NAS running vulnerable QTS 5.0.1 or QuTS hero h5.0.1 firmware before patched builds for CVE-2022-27596 unauthenticated SQL injection. Version is parsed from authLogin.cgi when exposed. !/usr/bin/env python3 -- coding: utf-8 -- """QNAP QTS 5.0.1 / QuTS hero h5.0.1 SQLi exposure...
Output Messenger Unauthenticated Zip-Slip Surface Detection
Checks for open TCP 14121 XMPP and 14135 SOCKS5 file listener used by Output Messenger Server 2.0.x pre-auth zip-slip RCE CVE-2026-75289. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Output Messenger Server XMPP / file-listener exposure CVE-2026-75289.""" import socket from kittysploit...
Gladinet CentreStack/Triofox LFI (CVE-2025-11371)
Unauthenticated local file inclusion via GET /storage/t.dn?s= UploadDownloadProxy TempDownload. Commonly used to read Web.config and extract ASP.NET machine keys chain to CVE-2025-30406 ViewState RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Gladinet CentreStack/Triofox unauthenticated LFI...
Exploit for Use After Free in Google Chrome
Check · Analysis · Exploit · Detection · Impact · Writ...
danfoss-shield
danfoss-shield Blocks Danfoss and Dixell refrigeration contro...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618 & CVE-2026-109619 - Pure HTTP RCE...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Cloudflare PHP CTF — php2shell WAF-bypass research Target:...
Exploit for Improper Access Control in Adobe Coldfusion
Adobe ColdFusion CVE-2023-26360 - Exploração de LFI para RCE...
Exploit for CVE-2026-98260
CVE-2026-98260 — OnePlus Pad 3 Pro OPD2513 memory-based root...
Exploit for CVE-2026-98260
cve-2026-98260-adb The adb execution tool for CVE-2026-98260...