34323 matches found
CVE-2017-12617
Primeiros passos O objetivo desta Prova de Conceito é demonstrar como é possível usar o CVE-2017-12617 para ter controle remoto em um servidor Apache Tomcat. Instruções 1. Execute este comando para iniciar o servidor. make serverup 2. Execute este comando para executar o ataque e enviar um web...
Flangvik
Flangvik POC in C per CVE-2021-26855 aka ProxyLogon, supporta la classica web shell semi-interattiva e shellcode in…...
SonicWall GMS and Analytics Web Services - Shell Injection
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...
Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection
Sunhillo SureLine 8.7.0.1.1 is vulnerable to OS command injection. The /cgi/networkDiag.cgi script directly incorporated user-controllable parameters within a shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. The following POST request...
Pinger 1.0 - Remote Code Execution
Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters. id:...
Enigma NMS < 65.0.0 - Authenticated OS Command Injection
An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...
ElasticSearch - Remote Code Execution
ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. id: CVE-2015-1427 info: name: ElasticSearch - Remote Code Execution author: pikpikcu...
Viessmann Vitogate 300 - Remote Code Execution
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method. id: CVE-2023-45852 info: name: Viessmann Vitogate 300 - Remote Code Execution autho...
OpenDreambox 2.0.0 - Remote Code Execution
OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...
Citrix SD-WAN Center - Remote Command Injection
Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...
Apache Spark - Authentication Bypass
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...
Citrix SD-WAN Center - Remote Command Injection
Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...
CVE-2024-46377
CVE-2024-46377 PoC für Schwachstelle beim beliebigen Datei-Upload in Best House Rental Management System 1.0 Übersicht Dieses Python-Skript demonstriert, wie die Schwachstelle beim beliebigen Datei-Upload in Best House Rental Management System 1.0 ausgenutzt werden kann. Die Schwachstelle...
vsftpd-234-vuln-report
💥 Relatório de Exploração de Backdoor vsftpd 2.3.4 Exploração de uma vulnerabilidade conhecida em vsftpd 2.3.4 usando Metasploit. 📌 Detalhes do Alvo IP do Alvo: 192.168.150.133 Serviço: FTP Versão Vulnerável: vsftpd 2.3.4 Módulo de Exploração: exploit/unix/ftp/vsftpd234backdoor Payload: Shell de...
PoC_CVE-2019-10149--rce
Informazioni Esecuzione remota di comandi in una shell da un servizio exim vulnerabile. Le versioni vulnerabili vanno dalla 4.87 alla 4.91 incluse. Controlla https://nvd.nist.gov/vuln/detail/cve-2019-10149. Il seguente script è basato sul PoC di Qualys. Controlla...
Fu3l-F1lt3r
|\ \ |\ | |\ \ |\ / |\ \ | \ |\ \ \ /\ \ \\ ||\ /\ \ \ \ \ /|/|\ \ \ | \ ||\ /\ \ |\ \ \ \ \ \\ \ |\ \ \ \ \ \ |/ \ \ \ \ \ \ \ \ |\ \ \ \ \ | \ \ \\ \ \ \ \ \ | \ \ \ \ \ \ \ \ \ \ \ | \ \ \ |\ \ \ \ \ \ \ \ |\ \ || ||| ||| || | ||||| ||| ||| Un'implementazione in Rust di CVE 2018-16763 con...
CVE-2023-41425-RCE-WonderCMS-4.3.2
🚨 Strumento di Exploit RCE per WonderCMS CVE-2023-41425 Questo strumento offensivo di sicurezza basato su Python automatizza lo sfruttamento di una vulnerabilità di Remote Code Execution RCE in WonderCMS 4.3.2 , in particolare la CVE-2023-41425. Semplifica il processo di creazione di un modulo te...
moveit-payload-decrypt-CVE-2023-34362
moveit-payload-decrypt-CVE-2023-34362 Este script shell, dado o OrgKey 0, irá analisar o cabeçalho dos artefatos base64 encontrados nos logs do MOVEit e descriptografar o objeto Serializado usado um payload...
RCE-CVE-2025-3248
Authentifizierte CVE-2025-3248 Langflow Remote Code Execution Dieses Python-Skript nutzt CVE-2025-3248 aus, um beliebige Befehle auszuführen oder eine Reverse Shell auf einem verwundbaren System zu starten. Für die Nutzung dieses Exploits ist eine Authentifizierung erforderlich. Funktionen...