PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

Authenticated PRTG network Monitor remote code execution Based on https://www.exploit-db.com/exploits/46527 Usage: simply manually edit the script to include your Target URL, admin username and password like so: TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin2019" Then insert...

CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...

CVE-2022-22963_Reverse-Shell-Exploit

CVE-2022-22963 Reverse Shell Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

CVE-2022-22963

CVE-2022-22963 Ejecución remota de código explotando CVE-2022-22963 para atacar el servicio Spring Cloud. Descargo de responsabilidad: Esto es solo con fines educativos. El autor no es responsable del uso de este programa. Úsalo bajo tu propio riesgo. Uso ./CVE-2022-22963 -h Usage: CVE-2022-22963...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview Field| Details ---|--- CVE| CVE-2025-24893 Software| XWiki Vulnerability| Server-Side Template Injection SSTI → RCE Authentication| Not required CVSS Score| Critical Context| Discovered during HackTheBox CTF Description XWiki exposes a...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 Detección de vulnerabilidad USAGE python MS15-034.py www.xxx.com:80 Programa de prueba Vulnerabilidad de ejecución remota de código en HTTP.sys CVE-2015-1635, MS15-034 La vulnerabilidad de ejecución remota de código existe en la pila de protocolos HTTP HTTP.sy...

CVE-2019-0709

CVE-2019-0708 BlueKeep Exploit CVE-2019-0708 RCE and Crash Exploit using Python Crash Exploit Published Usage: python3 crashexploit.py 127.0.0.1 64 RCE Exploit Not Published Usage: python3 exploitrce.py 127.0.0.1 payload...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 Exploit ⚠️ DISCLAIMER - EDUCATIONAL USE ONLY This exploit is for authorized penetration testing and educational purposes only. Unauthorized access to computer systems is illegal. The author is not responsible for any misuse. 📋 Overview CVE-2021-22911 is a critical...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...

cve-2019-16278

CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...

WHS3_vulhub

CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC 정수진@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...

xzbot

xzbot Exploración de la puerta trasera de xz CVE-2024-3094. Incluye lo siguiente: honeypot: servidor vulnerable falso para detectar intentos de explotación ed448 patch: parchea liblzma.so para usar nuestra propia clave pública ED448 backdoor format: formato de la carga útil de la puerta trasera...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

Rig-Exploit-for-CVE-2018-8174

Rig-Exploit-for-CVE-2018-8174 Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden iframe that redirects victims to Rig’s landing page, which includes an exploit for CVE-2018-8174 and shellcode. Th...

bluekeep

Description This script checks multiple IP addresses for the BlueKeep vulnerability CVE-2019-0708, which is a critical Remote Desktop Protocol RDP vulnerability found in older versions of Windows operating systems. The vulnerability allows attackers to remotely execute code on a target machine...

freemarker_RCE_struts2_s2-061

freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE testscript python freemarkerRCEstruts2s2-061.py...

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC This package allows: 1. Upload webshell to SharePoint 2. Extract ValidationKey 3. Generate signed ViewState 4. RCE via reverse/bind shell 🔧 Setup git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Running Upload the webshell From a SharePoint...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder = 2.5.1 - Local File Inclusion LFI Exploit Overview CVE-2025-2294 affects the Kubio AI Page Builder plugin for WordPress versions up to and including 2.5.1. It suffers from an unauthenticated Local File Inclusion LFI vulnerability via the...