Shellshock-CVE-2014-6271-Exploitation-and-Analysis

🐚 Shellshock CVE-2014-6271 – Exploitation & Analysis 📌 Overview This is the practical assignment for Vulnerability Assessment and Penetration Testing – II , focusing on the exploitation and analysis of the Shellshock vulnerability CVE-2014-6271. Conducted in a controlled lab environment using...

CVE-2025-55449

CVE-2025-55449 - AstrBot Remote Code Execution RCE Vulnerability Overview This repository contains a proof-of-concept exploit for CVE-2025-55449 , a critical Remote Code Execution RCE vulnerability in AstrBot. The vulnerability allows an attacker to execute arbitrary code on the target system by...

CVE-2025-60752

CVE-2025-60752 PoC of CVE-2025-60752 Affected product: Tinyc Http Server The full writeup article is available at https://zer0matt.blogspot.com/2026/05/cve-2025-60752-tinyc-http-server-stack.html Description A stack buffer overflow occurs when Tinyc receives a crafted input. The overflow occurs...

CVE-2017-12615-EXP

CVE-2017-12615-EXP .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !: .:! !!: !!: !!:...

xz-backdoor-research

CVE-2024-3094 Research Toolkit By Nikolaos Natsopoulos , IAM Consultant Interactive browser-based tool accompanying the research report: "CVE-2024-3094: Supply Chain Compromise via Social Engineering and Build System Manipulation in XZ Utils" 10.5281/zenodo.20700609 About In March 2024, a backdoo...

CVE-2021-42261

CVE-2021-42261 Suggested description Revisor Video Management System VMS before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

CVE-2018-14772

CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage $ python exploit.py -h usage: exploit.p...

CVE-2020-0796

CVE-2020-0796 Overview: The compression feature added to SMBv3 starting from Windows 10/Server version 1903 contains an integer overflow vulnerability confirmed by Microsoft on 12/03/2020. It allows an attacker to perform Local Privilege Escalation LPE and Remote Code Execution RCE. Here we will...

CVE-2025-34028-PoC-Commvault-RCE

CVE-2025-34028 - Commvault Command Center Remote Code Execution A Python exploit for CVE-2025-34028, a remote code execution vulnerability in Commvault Command Center. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability...

CVE-2026-112101 BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation

A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation erro...

EUVD-2026-104154

A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation erro...

CVE-2026-112101

The BlackBeltTechnology pi-agent-dashboard (versions up to 0.8.0 ) contains a vulnerability in the WebSocket Gateway component. Specifically, an unknown function within the /BlackBeltTechnology/pi-agent-dashboard file fails to properly validate origins when the cwd argument is manipulated. This f...

CVE-2024-27956-RCE-File-Package

CVE-2024-27956-RCE File Package Contents: 1. exploit.py Original Creator:https://GitHub.com/diego-tella 2. modifiedexploit.py Modified with an ignore ssl verification option 3. Screenshot 4. wpValvePressplugin.py Python script using URI parameters to search for vulnerable wp plugin...

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE Based entirely on https://github.com/dotPY-hax/gitlabRCE, which did not work for me and the HTML parsing stuff seemed cumbersome so I rewrote it in js. Usage Start a reverse shell handler in the usual way, then run this script with: TARGETURI="https://target"...

CVE-2021-22204

ExifTool Remote Code Execution Vulnerability This is supposed to be an analysis of CVE-2021-22204, but it feels more like my scratchpad filled with messy notes. It might seem rambling for a vulnerability analysis, but I learned a lot from it. To be honest, I have never used this tool and had almo...

CVE-2023-24100

CVE-2023-24100-Nuclei-Templates IoT RCE nuclei templates CVE-2023-24100 CNVD-2023-24100...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 and CVE-2025-71260 BMC FootPrints Pre-Authenticated Remote Code Execution Chain BMC FootPrints Pre-Authenticated Remote Code Execution Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if BMC FootPrints instance is vulnerable to...

CVE-2024-25291

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...