zoneminder-1.29-1.30-rce-exploit

ZoneMinder 1.29/1.30 SQLi to RCE Exploit A ready-to-run Python exploit for ZoneMinder 1.29/1.30 that chains the unauthenticated SQL injection CVE-2016-10204 , EDB-41239 all the way to an interactive reverse shell. This is a weaponized/automated PoC for a known, patched CVE, not a new exploit. EDB...

CVE-2026-24061-setup

CVE-2026-24061 Setup This repository contains the Docker setup for CVE-2026-24061. Once you have installed Docker, just do the following: 1. Clone this repository. 2. Run the following command: sudo docker build . --tag telnetd-auth-bypass 3. Once the docker image is built, we can start the...

EUVD-2026-112934

The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...

CVE-2026-119282: nrwl, @nx: Nx is a monorepo solution for TypeScript and polyglot codebases

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and interpolate plugin options from nx.json into command argument...

CVE-2026-79589

The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw. The vulnerability stems from the exposure of a UART debugging interface that lacks authentication, authorization, and access control functionality. An attacker with physical access can solder to and ...

BruteSploit

Brutesploit BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and can be used in CTF for manipulation,combine,transform and permutation some words or file text :p i wro...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...

CVE-2025-5548

🐞CVE-2025-5548 Buffer overflow in FreeFloat FTP Server 1.0 🎯 Stack Buffer Overflow Exploitation This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities Stack Buffer Overflow...

CVE-2023-45878

CVE-2023-45878 Wrote this script based on the work of https://herolab.usd.de/security-advisories/usd-2023-0025/ . The exploit works by using an Arbitrary File Write exploit in Gibbon LMS 25.0.1 . This PoC will use upload a simple php cmd script, and then use that to load a powershell revshell...

CVE-2020-16846-Saltstack-Salt-API

CVE-2020-16846-Saltstack-Salt-API Vulnerability Explained: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. The details about this vulnerability can be found here:...

CVE-2025-28915

CVE-2025-28915 Vulnerability Description: WordPress is a blog platform developed using PHP, supporting the setup of personal blog websites on servers running PHP and MySQL. WordPress ThemeEgg ToolKit versions 1.2.9 and earlier have a code issue vulnerability, which stems from allowing the upload ...

Java-Servlets-Shell

Java Servlets Shell Java Servlets Backdoor inspired by https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz Note : The WARs contain compiled Java code instead of JSP pages in order to be used in environments that block or do not compile JSP files...

hack

💀 PwnKit CVE-2021-4034 & Reverse Shell Toolkit ⚠️ DISCLAIMER: This repository has been created solely for educational and security research purposes. The author is not responsible for the misuse of these tools. Use it only in controlled environments or where you have explicit permission. 📜...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Command Injection via Git URL in CI/CD Pipeline Program Code Python cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repourl /tmp/repo"...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

CVE-2025-28915

CVE-2025-28915 - WordPress ThemeEgg ToolKit Arbitrary File Upload Exploit 📌 Description An Unrestricted File Upload vulnerability in the ThemeEgg ToolKit plugin for WordPress versions ≤ 1.2.9 allows authenticated attackers to upload web shells to the server. This can lead to remote code execution...

unrealircd3.2.8.1-local-exploit

Tested on Metasploitable 3 USAGE Ruby On Attacker's shell nc -nlvp 1111 On victim's shell ruby exploit.rb 127.0.0.1 Expected output on attacker's shell listening on any 1111 ... connect to 192.168.56.102 from UNKNOWN 192.168.56.105 48144 bobafett Python On victim's shell python3 exploit.py -ri...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 This is a modified version of a POC for proxylogon. Instead of laucnhing "whoami" it creates a new user and adds that user to the administrator group and creates a reverse shell. The origonal POC code can be found here: https://www.exploit-db.com/exploits/49663 Usage: python...

hfs-cve-2014-6287-exploit

HFS CVE-2014-6287 Exploit Tool Overview This repository contains a Python-based exploit tool designed to take advantage of the CVE-2014-6287 vulnerability in HTTP File Server HFS versions 2.3.x. This vulnerability allows an attacker to execute arbitrary commands on the server, potentially leading...

SSHintel

SSHintel — Lightweight SSH Honeypot SSHintel is a lightweight SSH honeypot built using Python and Paramiko. It simulates a fake Linux shell to log unauthorized access attempts, capture credentials, and analyze attacker behavior in a controlled environment. 🔧 Features Logs SSH login attempts with...