F5-BIG-IP-SmuggleShell-CVE-2023-46747-Exploit

F5 BIG-IP CVE-2023-46747 – Unauthenticated RCE + Reverse Shell Python3 & Nuclei versions – by raguraman Critical unauth RCE CVSS 9.8 via AJP + HTTP request smuggling Works on all unpatched BIG-IP 13.x → 17.x including latest 17.1.0.3 Patch: https://my.f5.com/manage/s/article/K000137353 Nov 2023...

CVE-2025-64155-hunter

CVE-2025-64155 Scanner A Python scanner for detecting the command injection vulnerability CVE-2025-64155 in Phoenix Monitor service. Description CVE-2025-64155 is a command injection vulnerability in Phoenix Monitor service that allows remote code execution through the clusterurl parameter in the...

CVE-2022-36267-PoC

CVE-2022-36267 - Airspan AirSpot 5410 Inyección de Comandos Remotos No Autenticada. Resumen Este repositorio contiene un script de shell inversa de Prueba de Concepto PoC para explotar CVE-2022-36267, una vulnerabilidad crítica en dispositivos Airspan AirSpot 5410. El script es una demostración...

BadBash

BadBash CVE-2014-6271 ShellShock RCE PoC tool ======= BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License : GPLv3 Orginal github project :...

CVE-2024-51788

💀 CVE-2024-51788 - WordPress The Novel Design Store Directory Plugin = 4.3.0 - Unauthenticated Arbitrary File Upload 🚨 Overview CVE-2024-51788 is a newly disclosed critical vulnerability affecting the The Novel Design Store Directory WordPress plugin = v4.3.0. This flaw allows unauthenticated...

CVE-2012-2982

Este PoC exploit para CVE-2012-2982 fue escrito como un ejercicio para la sala "Intro to PoC scripting" en TryHackMe. La sala se puede encontrar aquí: https://tryhackme.com/room/intropocscripting Originalmente iba a usar Python para seguir el tutorial, pero decidí practicar mis habilidades en Rus...

CVE-2023-45878-POC

CVE-2023-45878-POC CVE-2023-45878 poc for gibbon LMS on xampp windows. Upload a webshell called shell.php for command injection. For reverse shell uploads a powershell reverse shell ps1 script called shell.ps1 which is uploaded to the target machine using the shell.php. Requirments Python3 Reques...

cve-2018-1207

cve-2018-1207 Exploit iDRAC 7 & 8 firmware 2.52.52.52 Description Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote...

CVE-2025-1974-go

Explota CVE-2025-1974 con un solo archivo. Uso: 1. change serverip and serverport in shell.c 2. make 3. GOOS=linux go build -ldflags="-w -s -extldflags "-static"" -trimpath main.go 4. run main in your controlled pod...

CVE-2026-4480-exploit-poc

Usage: For anonymos login: python3 exploit.py --lhost --lport -t -N it is for anonymous login Login via credentials: python3 exploit.py --lhost --lport -t -u -p ! Error: the following arguments are required: -s/--sharename Note: if user is anonymous and no password, then just add -N without -u or...

CVE-2026-100369 CliInvoke: Argument Injection in Extensibility Runner Factory

CliInvoke and its formerly named AlastairLundy.CliInvoke package are .NET libraries for invoking command-line programs and wrapping executable processes. CliInvoke versions 2.0.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4, and 3.0.0-alpha.1 through 3.0.0-beta.1, as well as...

CVE-2025-10230

CVE-2025-10230: Samba Critical RCE CVSS 10.0 Vulnerability Summary CVE-2025-10230 is a critical remote code execution RCE vulnerability that remained hidden in the Samba codebase for 13 years. The flaw resides in the handling of WINS Windows Internet Name Service registration packets. When...

CVE-2026-38526

CVE-2026-38526 - Krayin CRM RCE Descripción Script PoC para vulnerabilidad crítica en Krayin CRM v2.2.x que permite RCE autenticado mediante carga de archivos sin restricciones. Uso Web shell python3 exploit.py -u http://target.com -e [email protected] -p password123 Reverse shell python3...

CVE-2026-63766_exploit

CVE-2026-63766 — GPT-SoVITS Unauthenticated OS Command Injection Unauthenticated remote code execution in GPT-SoVITS's Gradio web UI webui.py. The audio-processing helpers openasr, openslice, opendenoise, openuvr5 interpolate unsanitised Gradio textbox path values straight into shell commands run...

CVE-2025-46271-Reverse-Shell-PoC

CVE-2025-46271-Reverse-Shell-PoC Descargo de responsabilidad Este repositorio es solo para fines educativos. La información proporcionada aquí tiene como objetivo ayudar a los desarrolladores a comprender la vulnerabilidad y proteger sus sistemas. No utilice este exploit de manera maliciosa o sin...

CVE-2026-100368 CliInvoke.Specializations: Command injection in PowerShell and Cmd shell wrappers

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

CVE-2023-37903

CVE-2023-37903 Exploit for CVE-2023-37903 Proof Of Concept & Reverse Shell CVE Owned by: SeungHyun Lee...

CVE-2025-5781

FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...

TryHack3M-Bricks-Heist

TryHack3M: Atraco de Bricks Exploit • Writeup • Desafío CTF Un repositorio completo que contiene un exploit personalizado y un writeup detallado para el desafío TryHack3M: Bricks Heist Inicio Rápido • Estructura del Repositorio • El Exploit • El Writeup • Aviso Legal Resumen Este repositorio...

CVE-2024-36057

CVE-2024-36057 — Koha Library Software CVE ID: CVE-2024-36057 Product: Koha Library Software Vulnerability Type: OS Command Injection CWE-78 CVSS Score: 8.7 High Authenticated Affected Versions: Below 22.05.22 Credits: Karolis Narvilas Description Koha is an open-source integrated library system....