CVE-2012-2982-Webmin-Exploit

Webmin 1.590 Exploit per Esecuzione Remota di Comandi CVE-2012-2982 Panoramica Questo repository contiene un Proof-of-Concept PoC per CVE-2012-2982 , una vulnerabilità di esecuzione remota di comandi autenticata che interessa Webmin versioni 1.590 e precedenti. La vulnerabilità risiede...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interattiva dirottamento HTTP + POST + AES-256-CBC/BASE64 Rilevamento -dnslog Rilevamento senza output DNSLog Nuclei -poc Rilevamento Echo di vulnerabilità Sfruttamento -exp Shell interattiva echo base64 -exp2 Shell interattiva dirottamento HTT...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - vsFTPd 2.3.4 Exploitations-Labor Übersicht Dieses Projekt zeigt einen Penetration-Testing-Workflow gegen eine absichtlich verwundbare Maschine, Metasploitable 2. Das Ziel war es, eine bekannte Schwachstelle im FTP-Dienst zu identifizieren, auszunutzen und zu analysieren, um...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-6009

⚠️ Avvertenza: Questo repository è solo a scopo educativo e per test di sicurezza autorizzati. Non utilizzare contro sistemi che non possiedi o per i quali non hai ottenuto esplicita autorizzazione scritta. CVE-2026-6009 Prova di Concetto Riepilogo La libreria Jaspersoft report versione = 7.0.3 è...

CVE-2024-4157-SSRF-RCE-Reverse-Shell

CVE-2024-4157: Ottenere una Reverse Shell su Havoc C2 - Concatenando SSRF con RCE Ottieni una reverse-shell con IP e porta locali, concatenando CVE-2024-4157 POC con havocauthrce Usage Informazioni di base root@kitploit: $ python3 exploit.py usage: exploit.py -h -t TARGET -i IP -p PORT -A USERAGE...

ActiveMQ-EXPtools

ActiveMQ-EXPtools Suporta detecção e exploração de vulnerabilidades do Apache ActiveMQ: CVE-2015-5254, CVE-2016-3088, CVE-2022-41678, CVE-2023-46604, CVE-2024-32114, CVE-2026-34197, CVE-2026-40466, CVE-2026-42588 !WARNING Esta ferramenta é destinada apenas para pesquisa de segurança e fins...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-16348

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

EUVD-2026-65059

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

CVE-2026-76072

Continue CLI through 1.5.47 uses an incomplete denylist in evaluateTerminalCommandSecurity.ts as its sole barrier against destructive shell commands in headless and auto modes. The dangerous-path check covers only /, ~, /usr, /etc, /bin, and /sbin, leaving paths like /home, /root, /var, /opt, and...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit Dieses Repository enthält einen Python-basierten Exploit, der auf eine bösartig mit Hintertür versehene Version von vsFTPd 2.3.4 abzielt. Im Gegensatz zu herkömmlichen Schwachstellen wurde diese Hintertür durch eine unbefugte Modifikation des...

CVE-2026-52618

CVE-2026-52618 — @webfer/mcp-ansible-drupal: حقن أوامر نظام التشغيل عبر المتغيرات الإضافية لأداة executeDeployment spawncmd0, cmd.slice1, shell: true يعيد ضم مصفوفة وسائط في سلسلة /bin/sh -c واحدة دون تهريب escaping، ولذلك فإن أي حرف خاص بالصدفة shell metacharacter في قيمة extraVars مقدَّمة إلى...

APT-Backpack

APT-Backpack CVE più comuni utilizzati dagli APT, RAT legittimi e altri strumenti usati dagli avversari CVE CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Lettura file non autenticata CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFle...

SMBGhost_AutomateExploitation

SMBGhost CVE-2020-0796 Automação de Exploração e Detecção Este programa Python é um invólucro da vulnerabilidade SMBGhost RCE. Todos os créditos pelo exploit funcional vão para chompie1337. Todos os créditos pelo scanner vão para ioncodes. Apenas automatizei estas funções em um programa. Você...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

EUVD-2026-65007

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-39987.py

CVE-2026-39987.py Este script Python explora o endpoint vulnerável marimo /terminal/ws e retorna um shell interativo. COMO USAR : A única alteração que precisa ser feita é mudar a variável HOST no script. Após alterar a variável HOST, execute o script no seu Terminal como no exemplo abaixo: EXEMP...

gitlab-RCE-11.4.7

gitlab-RCE-11.4.7 GitLab 11.4.7 CE RCE Exploit mit verschiedenen Reverse Shells. CVE-2018-19571: https://nvd.nist.gov/vuln/detail/CVE-2018-19571 CVE-2018-19585: https://nvd.nist.gov/vuln/detail/CVE-2018-19585 Modifikation der Version von Sam Redmond und Tam Lai Yin zum Lernen und Üben. Verwendung...