20347 matches found
CVE-2022-25060
CVE-2022-25060 This script exploits a remote command execution vulnerability under the oalstartPing component in the TPLink WR840N router...
CVE-2018-2380
CVE-2018-2380 CVSS v3 Base Score: 6.6/10 PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM Script usage example root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true Where --host...
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...
CentOS-Control-Web-Panel-CVE
CentOS Control Web Panel version 0.9.8.836 - 0.9.8.847 On June 29, 2019 our team started to find vulnerability on CentOS Control Web Panel CWP version 0.9.8.836, and we found some critical vulnerabilites. Some of the vulnerabilities we found can be chained to compromise the server from anonymous...
CVE-2024-10914-Exploit
SilverX Exploit Tool π Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. β οΈ Disclaimer This tool is for educational and...
CVE-2024-32002
CVE-2024-32002 Versions 1.0.0 This version work only on remote target with authenticated user and git version 2.45.0 affected. This vulnerability affect Git with version: 2.45.0 Proof Of Concept The POC can trigger an RCE Remote Command Execution using the git clone command via specific vulnerabl...
CIMplant
CIMplant C port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command. Introduction CIMplant is a C rewrite and...
CVE-2021-31805
CVE-2021-31805 1.Introduction Struts2 Remote Command Execution Vulnerability CVE-2020-17530 & CVE-2021-31805 POC & EXP 2.Usage Parameter Introduction root@kitploit: -u target url -m dnslog|exp //Default echo interface character check -n s2-062 //Default s2-061 -s windows //Default linux -p...
CVE-2019-15107
CVE-2019-15107 Exploit en Python El exploit para CVE-2019-15107 webmin Agradecimientos Basado en el mΓ³dulo de Metasploit https://www.exploit-db.com/exploits/47230 Aviso original: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...
CVE-2007-2447-Exploit
CVE-2007-2447 Exploit This repository contains an exploit for Samba smbd 3.0.20 CVE-2007-2447 that allows remote command execution via crafted SMB requests. Prerequisites This exploit requires Python 3 and a few dependencies. It's recommended to set up a virtual environment before running the...
Lilith
Lilith Free & Native Open Source C++ Remote Administration Tool for Windows Lilith is a console-based ultra light-weight RAT developed in C++. It features a straight-forward set of commands that allows for near complete control of a machine. Disclaimer The use of this software on any device that ...
CVE-2021-41730
TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...
CVE-2023-24706
CVE-2022-24706 Apache CouchDB Remote Command Execution Vulnerability PoC...
CVE-2025-54068
CVE-2025-54068 A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. This tool is a recoded version of the original project by Synacktiv : Livepyre β https://github.com/synacktiv/Livepyre The core concept and methodology are based o...
PIL-CVE-2017-8291
Python PIL Remote Command Execution Vulnerability GhostButt The PIL Pillow module for processing images in Python is affected by the GhostButt vulnerability CVE-2017-8291 because it calls GhostScript internally, resulting in a remote command execution vulnerability. Vulnerability Summary PIL...
WMImplant
WMImplant WMImplant is a PowerShell based tool that leverages WMI to both perform actions against targeted machines, but also as the C2 channel for issuing commands and receiving results. WMImplant will likely require local administrator permissions on the targeted machine. Developed by...
SpringCloudGatewayRCE
SpringCloudGateway Remote Command Execution Vulnerability Code By: Tas9er 0x00 Risk Overview This tool is intended for authorized security testing only. Unauthorized attacks on systems are prohibited. 0x01 Tool Usage java -jar SpringCloudGatewayRCE.jar 0x02 Bug Issues Will address later...
firepwner
CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example o...
SyncShield
π SyncShield β Browser Extension for CVE-2018-5764 Detection Detect unsafe Rsync commands before they become exploits A lightweight, privacy-focused browser extension developed as part of Final Year Project NWS/129/23B to detect missing --protect-args flag in Rsync commands β preventing remote...
CVE-2021-21300
CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...