Exploit for CVE-2026-103056

CVE-2026-103056 — AiSOC OS Command Injection into CrowdStrike...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

OverlayFS-CVE-2021-3493

gcc Exploit.c -o Exploit whoami root...

Exploit for OS Command Injection in Asus Rt-Ax55_Firmware

CVE-2023-39780 — ASUS RT-AX55: command injection в qosbwrul...

CVE-2021-4034

CVE-2021-4034 A day for the polkit privilege escalation exploit Simply run and enjoy ./blasty for your root shell. The original advisory from the real authors is - here Installation If the exploit works, you will get a root shell immediately: user@tecnokarita-/Descargas $ git clone...

Exploit for OS Command Injection in Pfsense Pfblockerng

CVE-2022-40624 — pfBlockerNG — Host header → root RCE Лаборат...

poc-cve-2019-14287

PoC of CVE-2019-14287 Overview This is a sample that reproduces the sudo vulnerability CVE-2019-14287 on a Docker container. Exercise Steps 1. Start the container with docker compose up -d 2. Enter the container with docker exec -it vulnerablesudoapp bash 3. Execute whoami and id commands to...

CVE-2018-11510

A couple exploits for CVE-2018-11510 by Kyle Lovett @SquirrelBuddha and myself Matthew Fulton/@haqur. Leverages an unauthneticated command injection to get a root shell back. The metasploit module has a separate payload included in the repo. Will see if I can get them included via a pull request...

CVE-2026-118238

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdu...

CVE-2021-4034-new

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here...

root-s24-e1s

Root S24 e1s / S921BXXSDCZB2 Per-boot local root on Galaxy S24 SM-S921B firmware S921BXXSDCZB2 kernel 6.1.138-android14-11, then late-load KernelSU Next so com.rifsxd.ksunext reports Working LKM. Not affiliated with Root My Galaxy. No GitHub payload feed, no multi-device catalog. One firmware,...

CVE-2024-3400-

PAN-OS Firewall Command Injection Vulnerability This repository contains a Go script that exploits a Command Injection vulnerability in firewalls running Palo Alto Networks' PAN-OS operating system. The vulnerability, identified as CVE-2024-3400, allows an unauthenticated attacker to execute...

opencode-pentest

opencode-pentest An OpenCode-native penetration-testing frame...

Security Bulletin: Nomad dispatch payload writes can escape the allocation directory through symlinks

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to modify files outside its allocation directory. When the client agent runs as root, this could lead to code execution as root on t...

CVE-2026-118238

The Tenda W18E High-Power AP is vulnerable to OS command injection in its web management server (/bin/httpd) via the diagnose packet-capture feature. The vulnerability occurs because the formSetNetCheckTools function fails to validate shell metacharacters in the protocol and targetDevice JSON fie...

CVE-2026-118238 CVE-2026-118238

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdu...

CVE-2026-118238 CVE-2026-118238

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdu...

EUVD-2026-114093

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or targetDevice fields, which are later concatenated into a tcpdu...

CVE-2025-32463

CVE-2025-32463 - Setup and Execution Guide This is the first time I’ve ported a malicious exploit into a Nuclei template for a non-intrusive vulnerability scan that still demonstrates the underlying issue. I documented the process in more detail expressly as a learning exercise. My main challenge...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...