CVE-2007-2447-Exploit

CVE-2007-2447 Exploit This repository contains an exploit for Samba smbd 3.0.20 CVE-2007-2447 that allows remote command execution via crafted SMB requests. Prerequisites This exploit requires Python 3 and a few dependencies. It's recommended to set up a virtual environment before running the...

rejjeto_hfs-rce-exploit-cve-2014-6287

Exploit de Ejecución Remota de Comandos en HFS CVE-2014-6287 Esta es una reescritura en Python 3 del clásico exploit de Ejecución Remota de Comandos RCE dirigido a Rejetto HTTP File Server HFS v2.3.x , aprovechando la vulnerabilidad identificada como CVE-2014-6287. Descubierto originalmente por...

CVE-2012-2982

CVE-2012-2982 also known as /file/show.cgi Remote Command Execution A simple CVE-2012-2982 poc...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script que explota la vulnerabilidad que permite establecer una puerta trasera en el servicio UnrealIRCd con CVE-2010-2075 Uso usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

CVE-2021-32157

..| XSS a RCE CRON|.. Descripción : Explotando un ataque de Cross-Site Scripting Reflejado XSS para obtener una Ejecución Remota de Comandos RCE a través de la función de Trabajos Cron Programados de Webmin Versión probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de ataque: Remoto...

CVE-2021-32160

..| XSS a usuario privilegiado |.. Descripción : Explotando un ataque de Cross-Site Scripting XSS reflejado para crear un usuario privilegiado a través de la función de añadir usuarios de Webmin, luego obteniendo una reverse shell a través de la función de procesos en ejecución de Webmin Versión...

CVE-2025-57174

CVE-2025-57174 - Siklu EtherHaul Series - Unauthenticated Remote Command Execution CVE-2025-57174 Unauthenticated Remote Command Execution Affected Versions: Firmware 7.4.0 - 10.7.3 likely all versions since 7.4.0 How to use python3 CVE-2025-57174.py 172.16.100.52 'simple-command show system' --n...

CVE-2021-32156

..| CSRF a RCE CRON |.. Descripción : Explotando un ataque de Cross-site request forgery CSRF para obtener una Ejecución Remota de Comandos RCE a través de la función de Trabajos Cron Programados de Webmin Versión Probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de Ataque: Remoto...

CVE-2007-2447

CVE-2007-2447 - username map script "The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows...

CVE-2019-16113-Bludit-3.9.2-RCE

CVE-2019-16113 Bludit 3.9.2 Remote Command Execution RCE...

CVE-2021-31760

..| CVE-2021-31760 |.. Descripción : Explotando un ataque de falsificación de solicitudes entre sitios CSRF para obtener una ejecución remota de comandos RCE a través de la función de procesos en ejecución de Webmin Versión probada : Webmin 1.973 última versión de GitHub 07/03/2021 Tipo de ataque...

PoC_CVE-2019-10149--rce

About Remote Command Execution into shell from a vulnerable exim service. Vulnerable versions go from 4.87 to 4.91 inclusive. Check https://nvd.nist.gov/vuln/detail/cve-2019-10149. The following script is based on Qualys PoC. Check...

CVE-2022-46080

CVE-2022-46080 Nexxt Router 15.03.06.60 Authentication Bypass and Remote Command Execution...

CVE-2018-3245

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933 @mbechler CVE20183245 @mbechler...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the traceroute function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic...

CVE-2024-51378

CVE-2024-51378 Analysis of the CVE-2024-51378 vulnerability, scripts for searching vulnerable hosts, using the exploit in single-threaded and multi-threaded mode in Python and nuclei. The use of scripts is allowed only for educational purposes on test hosts. 1-CVE-2024-51378.pdf - main file with ...

cupspot-2024-47177

CUPS Honeypot Overview This project implements a honeypot for capturing attempted exploitations of vulnerabilities in the CUPS Common UNIX Printing System. Specifically, it is designed to monitor for exploitation attempts related to CVE-2024-47177. This vulnerability allows remote command executi...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Uso Ejecuta el script con dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploit started o...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Exploit de prueba de concepto para la vulnerabilidad de Log4j CVE-2021-44228, también conocida como Log4Shell. Esta herramienta genera una clase Java maliciosa, inicia un servidor de referencia LDAP y sirve el payload a través de HTTP, permitiendo a un atacante remoto...