Erlang-OTP-PoC_CVE-2025-32433

Erlang/OTP SSH Pre-Authentication Channel Confusion 📺 Proof of Concept Video Description: A demonstration of the Erlang/OTP SSH Pre-Authentication Channel Confusion vulnerability. Click here to watch the full demo on YouTube Abstract What is this PoC about? This Proof of Concept demonstrates...

OpenSMTPD-CVE-2020-7247-

OpenSMTPD Remote Command Execution Vulnerability CVE-2020-7247 WHS 4th Park Solmin Original link: https://github.com/vulhub/vulhub/blob/43eae7170d09e7748c3aac64cd6a8e5af508a8ef/opensmtpd/CVE-2020-7247/README.md Overview OpenSMTPD is an SMTP server program used on Unix-like operating systems. It c...

Atlassian Bitbucket - Remote Command Injection

Atlassian Bitbucket Server and Data Center is susceptible to remote command injection. Multiple API endpoints can allow an attacker with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request, thus making it possible to obtain...

TerraMaster TOS - Unauthenticated Remote Command Execution

TerraMaster TOS = 4.2.06 is susceptible to a remote code execution vulnerability which could allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php via the Event parameter. id: CVE-2020-28188 info: name: TerraMaster TOS - Unauthenticated Remote Command Execution...

Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution

Zoho ManageEngine ADSelfService Plus version 6113 and prior are vulnerable to a REST API authentication bypass vulnerability that can lead to remote code execution. id: CVE-2021-40539 info: name: Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution author:...

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket Remote Command Execution RCE Technical Analysis & Laboratory Exploitation of Null-Byte Argument Injection Vulnerability Summary CVE-2022-36804 is a high/critical Argument Injection vulnerability within the REST API of Atlassian Bitbucket Server and Data Center. While the...

RedArrow

RedArrow3.2 - ThinkPHP 5.0.23 Herramienta de Ejecución Remota de Comandos - Manual de Uso 1. Introducción a la Herramienta RedArrow3.2 es una herramienta gráfica para la vulnerabilidad de ejecución remota de comandos en ThinkPHP 5.0.23, que ofrece dos funciones principales: ejecución de comandos...

WP-CVE-2016-10033

WordPress = 4.6 Remote Command Execution Vulnerability PHPMailer CVE-2016-10033 Vulnerability Information WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers supporting PHP and MySQL databases. It can also be used as a Content Manageme...

CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...

Adobe-ColdFusion-8-RCE-CVE-2009-2265

Adobe ColdFusion 8 - Remote Command Execution RCE Exploit Overview This exploit targets a known vulnerability in Adobe ColdFusion 8 CVE-2009-2265. It enables remote command execution RCE by uploading a malicious JSP payload that establishes a reverse shell connection. Exploit Details CVE :...

Mass-CVE-2025-29306

FoxCMS Mass Exploiter CVE-2025-29306 A specialized automation tool for security researchers to perform remote command execution RCE testing across multiple targets. 🛡️ Security Note This program is written in Bash and has been encrypted/compiled with SHC Shell Script Compiler. The source code is...

CVE-2018-6574

CVE-2018-6574 Exploit for remote command execution in Golang go get command. Introduction When you go get a package, Go is designed to build and install the package without running any code from it. The intent is that you can safely get, build, and even install Go packages without trusting them a...

CVE-2020-35713

Description Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page. How to use Step 1: Modify the IP address in cve-2020-35713.py file to the target address Step 2: Run the...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 test program This remote command execution vulnerability in webmin, roughly caused by perl's qx/…/ leading to command execution, requires certain special conditions. During reproduction, I casually wrote a graphical exploit program. It is worth noting that the user...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Proof-of-concept exploit for the Log4j vulnerability CVE-2021-44228, also known as Log4Shell. This tool generates a malicious Java class, starts an LDAP referral server, and serves the payload over HTTP, allowing a remote attacker to execute arbitrary commands on a...

CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool A powerful exploit tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js React Server Components. This tool allows remote command execution RCE in vulnerable Next.js applications with built-in WAF bypass capabilities. Overview CVE-2025-55182 is a critic...

CVE-2022-24706

CVE-2022-24706 Contributors White Hat School 4th Batch 39th Class Geum Jeong-hyeon@junghyeonkum CouchDB Erlang Distribution Remote Command Execution Vulnerability CVE-2022-24706 Summary Apache CouchDB is an open-source document-oriented NoSQL database implemented in Erlang. Because Apache CouchDB...

rejjeto_hfs-rce-exploit-cve-2014-6287

HFS Remote Command Execution Exploit CVE-2014-6287 This is a Python 3 rewrite of the classic Remote Command Execution RCE exploit targeting Rejetto HTTP File Server HFS v2.3.x , leveraging the vulnerability identified as CVE-2014-6287. Originally discovered by Avinash Kumar Thapa aka "-Acid" , th...

CVE-2012-2982

CVE-2012-2982 también conocido como /file/show.cgi Ejecución Remota de Comandos Un simple poc de CVE-2012-2982...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...