CVE-2020-5902-fofa-scan

CVE-2020-5902-fofa-scan Introducción Script de escaneo fofa para la vulnerabilidad de ejecución remota de código en F5 BIG-IP CVE-2020-5902 Requisitos de explotación Membresía de fofa, rellenar el valor de fofaproarssession. Modificar el valor de keyword en la línea 12 por su cuenta. Modificar el...

lamda

FIRERPA Android ｜ AI-Powered Automation An all-in-one Android automation framework that combines on-device services, AI-ready agents, and extensible tool invocation. Documentation | 使用文档 | TELEGRAM | QQ Group | SKILLS | llms-full.txt | 中文版本 FIRERPA is an all-in-one Android device control platform...

CVE-2024-36401

CVE-2024-36401: GeoServer Ejecución Remota de Código No Autenticada Exploit: una herramienta de detección y explotación de vulnerabilidades para GeoServer Ejecución Remota de Código No Autenticada CVE-2024-36401. Instalación git clone https://github.com/RevoltSecurities/CVE-2024-36401.git cd...

CVE-2020-29607

CVE-2020-29607-Exploit Exploit Title: Pluck CMS 4.7.13 - File Upload Remote Code Execution Authenticated CVE description: A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality,...

CVE-2024-6782

CVE-2024-6782 Calibre Remote Code Execution CVE-2024-6782 Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

paracosme

Paracosme - CVE-2022-33318 - Remote Code Execution in ICONICS Genesis64 Paracosme is a memory corruption exploit I wrote to target the Genesis64 suite v10.97.1 made by ICONICS to achieve remote code execution. The exploit was demonstrated during the Pwn2Own 2022 Miami contest that took place at t...

ruler

Introducción Ruler es una herramienta que te permite interactuar con servidores Exchange de forma remota, a través del protocolo MAPI/HTTP o RPC/HTTP. El objetivo principal es abusar de las características del lado del cliente de Outlook y obtener una shell de forma remota. Todos los detalles sob...

Cacti-CVE-2020-8813

Cacti-CVE-2020-8813 Usage: cactirce.py options Options: -h, --help show this help message and exit -u URL, --url=URL Required target URL eg:. http://Cacti/ -l LHOST, --lhost=LHOST Required Attacker IP addr -p LPORT, --lport=LPORT Default 443 Attacker IP Port Ejemplo: python3 cactirce.py -u...

CVE-2021-25003

CVE-2021-25003 Title: WPCargo 6.9.0 - Unauthenticated RCE Author: Krzysztof Zając https://kazet.cc/ CVE: CVE-2021-25003 Installation git clone https://github.com/biulove0x/CVE-2021-25003.git cd CVE-2021-25003/ python3 -m pip install -r requirements.txt How to run autoexploit $ python3 WpCargo.py...

CVE-2021-26828_ScadaBR_RCE

POC CVE-2021-26828ScadaBRRemoteCodeExecution ScadaBR 0.9.1 on Linux and through 1.0 and 1.12.4CE on Windows allows remote authenticated users to upload and execute arbitrary JSP files via 'viewedit.shtm' and Remote Code Execution. Exploit Usage Commands: Windows: $ sudo python WinScadaRCE.py Linu...

BackDoorSim

BackdoorSim Descripción general BackdoorSim es una herramienta de administración y monitoreo remoto diseñada con fines educativos y de prueba. Consta de dos componentes principales: ControlServer y BackdoorClient. El servidor controla al cliente, permitiendo diversas operaciones como transferenci...

SubSeven

SubSeven Legacy "SubSeven Legacy is a complete remake of the infamous SubSeven Backdoor also known as Sub7, a popular remote access trojan from the late 90s. More information about the original Sub7 Backdoor can be found on the official Wikipedia page. Like the original Sub7 program, SubSeven...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — Análisis de Ejecución Remota de Código IPv6 TCP/IP 📌 Descripción del Proyecto Este proyecto presenta un análisis técnico y una demostración práctica de la vulnerabilidad crítica CVE-2024-38063 , divulgada por Microsoft durante el Patch Tuesday 13 de agosto de 2024. La...

cve-2022-22947-spring-cloud-gateway

Vulnerability Overview Spring Cloud Gateway is a new project under Spring Cloud, built on Spring 5.0, Spring Boot 2.0, and Project Reactor. It aims to provide a simple and effective unified API routing management method for microservice architectures. Recently, Spring Cloud Gateway was reported t...

CVE-2022-0778-POC

Un POC sencillo de activación remota para CVE-2022-0778 Por qué Mientras intentábamos validar si las implementaciones de servidor de nuestro lado eran/son vulnerables a CVE-2022-0778, resultó extremadamente engorroso hacerlo de forma remota. Las instrucciones para crear certificados maliciosament...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2024-47533 - Cobbler XMLRPC Authentication Bypass RCE Exploit ⚠️ Critical Remote Code Execution via Authentication Bypass in Cobbler 🛠️ PoC implementation by @dollarboysushil 💡 Overview Cobbler, a Linux installation server that enables rapid setup of network installation environments, has an...

cve-2025-62726-poc

CVE-2025-62726 POC - n8n Git Node RCE Educational Purpose This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025 Vulnerability Overview CVE ID: CVE-2025-62726...

CVE-2024-7029

ES GenAvTechRCEExploit Un PoC para la vulnerabilidad CVE-2024-7029 encontrada en dispositivos AvTech, que permite la ejecución remota de código RCE. Esta herramienta puede escanear dispositivos vulnerables y ejecutar comandos en ellos de forma interactiva. Características Detección de...

CVE-2021-40444-POC

CVE-2021-40444-POC An attempt to reproduce Microsoft MSHTML Remote Code Execution RCE Vulnerability using Metasploit Framework. works best if not run in FlareVM PREPARATION Git Clone the repository from https://github.com/lockedbyte/CVE-2021-40444 Prepare the .dll template to be used later with...