CVE-2021-38647

OMIGOD Proof on Concept Exploit for CVE-2021-38647 OMIGOD For background information and context, read the our blog post detailing this vulnerability: https://www.horizon3.ai/news/blog/omigod Details CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. OMI agent...

CVE-2023-27350

! Be careful executing this as it re-configures the server config in order to execute commands. The script reverts the changes on exit but might not revert it if the process is improperly killed ! CVE-2023-27350 Papercut Unauthenticated RCE Versions The script automatically tests if server is...

BigFinger

CVE-2023-46747 - Big-IP RCE Unauthenticated This is a Python3 script to exploit the unauthenticated remote code execution vulnerability CVE-2023-46747 in F5 BIG-IP appliances via the TMUI interface. Basically, if this vuln hits, you get a shell without credentials. Built with threading, file inpu...

Gitlab-CVE-2021-22205

Unauthenticated RCE on Gitlab version -c Tested on version 13.10.1-ce.0...

Zimbra

Active Exploitation of Zimbra CVE-2022-37042 RCE Unauthenticated The following research began by trying to understand the POCs from several GitHub repositories shared by many researchers and ended in an interesting surprise, which I will share in the following paragraphs. On August 10 of this yea...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repository for CVE-2020-15568 Metasploit module Vulnerable Application Description A dynamic class method invocation vulnerability exists in file include/exportUser.php which leads to executing remote commands on TerraMaster devices with root privileges. The...

CVE-2025-9074

CVE-2025-9074: Docker Engine API Unauthenticated RCE Severity : CRITICAL | CVSS Score : 9.8 estimated | Affected Versions : Docker Desktop 4.44.3 A proof-of-concept exploit for CVE-2025-9074, an unauthenticated Remote Code Execution vulnerability in Docker Engine API that allows privileged...

CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information Published : 2024-09-26 Base Score : 5.3 MEDIUM EPSS Score : 0.06% Probability of exploitation. Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description : CUPS is a standards-based, open-source printing system, and...

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal RESTful Web Services RCE Python implementation of the remote code execution exploit for CVE-2019-6340, based on analysis of the Metasploit module and the prior work by leonjza. Key difference from EDB-46459: uses POST instead of GET, bypassing Drupal's page cache — can be...

nginx-rift-private-lab

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This fork extends the original PoC with an ASLR-bypass...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

omigod-lab

Readme An educational lab VM to learn about the 9.6 CVSS unauthenticated Remote Code Execution RCE vulnerability in Open Management Infrastructure software CVE-2021-38647. Disclosure original research: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure OMI source code:...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

nmap-CVE-2022-29464

nmap-CVE-2022-29464 nmap-CVE-2022-29464 is an NSE script for detecting CVE-2022-29464 vulnerability. Unauthorized and unrestricted arbitrary file transfer vulnerability that allows unauthenticated attackers to obtain RCEs on WSO2 servers by sending malicious JSP files. Vulnerability See good...

CVE-2011-2523

vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...

cpanel-sessionscribe

SessionScribe - CVE-2026-41940 Critical unauthenticated RCE in cPanel & WHM. Four HTTP requests forge a root session via CRLF injection into the password field of a preauth session. No auth, no preconditions, every supported tier affected. Disclosed 2026-04-28 by Sina Kheirkhah / watchTowr Labs...

CVE-2025-34152

⚠️ CVE-2025-34152 – Shenzhen Aitemi M300 Wi-Fi Repeater RCE 🚨 Overview Shenzhen Aitemi M300 Wi-Fi Repeater is affected by an unauthenticated remote code execution RCE. No login required Does not reboot the device Can be exploited remotely 🛠 Vulnerable Versions Version| Status ---|--- 1.0.x| ❌...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to execute arbitrary code.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-46169

CVE-2022-46169 This repository contains a Proof of Concept PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti = 1.2.22. You can read more about the vulnerability here. The script adds a reverse shell handler and is based on the code written by sAsPeCt488. You can view the original code here...