PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
#!/usr/bin/env python3
remote
remote 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
South River Technologies Titan MFT Server 26.0.0 – code execution
Title: South River Technologies Titan MFT Server 26.0.0 - code execution
Synametrics Syncrify 6.2 – command execution
Title: Synametrics Syncrify 6.2 - command execution
Edimax BR-6478AC firmware v2.20 – authenticated command injection
Title: Edimax BR-6478AC firmware v2.20 - authenticated command injection
Exasol Database 7.1.30 – command execution
Title: Exasol Database 7.1.30 - command execution
Parasoft Continuous Testing Platform 10.7.5 – JSP command execution
Title: Parasoft Continuous Testing Platform 10.7.5- JSP command execution
ProSoft RLX-IFH24E v2.2.44 – Unsigned Firmware Upgrade Package Executed as Root
Title: ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
Teltonika_RutOS 00.07.06.21 – command injection
Title: Teltonika_RutOS 00.07.06.21 - command injection
Ecava_ntegraXor IGX_16.0.701.10 – RCE
Title: Ecava IntegraXor IGX 16.0.701.10 - RCE
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 – RCE
#!/usr/bin/env python3
CVE-2026-42167 – ProFTPD mod_sql post-authentication SQLi – RCE
#!/usr/bin/env python3
PCMan 2.0.7 – Buffer Overflow
# Exploit Title: PCMan FTP Server 2.0.7 - Buffer Overflow
phpSysInfo 3.4.5 – IP Allowlist Bypass
# Exploit Title: phpSysInfo 3.4.5 - IP Allowlist Bypass
ipTIME A3004T – Remote Code Execution
# Exploit Title: ipTIME A3004T - Remote Code Execution
D-Link DNS_340L – OS Command Injection
# Exploit Title: D-Link DNS_340L - OS Command Injection
PraisonAI praisonaiagents 1.6.77 – Remote Code Execution
#!/usr/bin/env python3
mcp-server-kubernetes 3.8.x – Argument Injection
#!/usr/bin/env python3
Hydra – Stack Buffer Overflow
# Exploit Title: Hydra - Stack Buffer Overflow
iOS Bluetooth PAN Exploit – Ethernet Gateway without Adapter
# Exploit Title: iOS Bluetooth PAN - Zero-Cost Ethernet Gateway (USB Port 62078)
Notepad++ 8.9.6 – Arbitrary Code Execution
# Exploit Title: Notepad++ 8.9.6 - Arbitrary Code Execution
Microsoft – NTLMv2 Hash Capture
# Titles: Microsoft - NTLMv2 Hash Capture
Wing FTP Server 8.1.3 – Authenticated Remote Code Execution
# Exploit Title: Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
telnetd 2.7 – Buffer Overflow
# Exploit Title: telnetd 2.7 - Buffer Overflow
Windows 10.0.17763.7009 – spoofing vulnerability
# Exploit Title: Windows 10.0.17763.7009 - spoofing vulnerability
windows 10/11 – NTLM Hash Disclosure Spoofing
# Exploit Title: windows 10/11 - NTLM Hash Disclosure Spoofing
Redis 8.0.2 – RCE
# Exploit Title: Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
Ingress-NGINX Admission Controller v1.11.1 – FD Injection to RCE
# Exploit Title: Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
Ilevia EVE X1/X5 Server 4.7.18.0.eden – Reverse Rootshell
#!/usr/bin/env python
ClipBucket 5.5.0 – Arbitrary File Upload
# Exploit Title: ClipBucket 5.5.0 - Arbitrary File Upload
ClipBucket 5.5.2 Build #90 – Server-Side Request Forgery (SSRF)
# Exploit Title: ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
HTTP/2 2.0 – Denial Of Service (DOS)
#!/usr/bin/env python3
HTMLDOC 1.9.13 – Stack Buffer Overflow
#!/usr/bin/env python3
GeoVision ASManager Windows Application 6.1.2.0 – Remote Code Execution (RCE)
# Exploit Title: GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
Ivanti Endpoint Manager Mobile 12.5.0.0 – Authentication Bypass
#!/usr/bin/env python3
Tenda AC20 16.03.08.12 – Command Injection
#include <stdio.h>
Microsoft Windows 10.0.19045 – NTLMv2 Hash Disclosure
# Exploit Title: Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure
Belkin F9K1009 F9K1010 2.00.04/2.00.09 – Hard Coded Credentials
#include <stdio.h>
Microsoft SharePoint Server 2019 (16.0.10383.20020) – Remote Code Execution (RCE)
# Exploit Title: Microsoft SharePoint Server 2019 – Remote Code Execution (RCE)
Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 – Command Injection
#include <stdio.h>
Citrix NetScaler ADC/Gateway 14.1 – Memory Disclosure
# Exploit Title: Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure
Cisco ISE 3.0 – Authorization Bypass
# Exploit Title: Cisco ISE 3.0 - Authorization Bypass
Cisco ISE 3.0 – Remote Code Execution (RCE)
# Exploit Title: Cisco ISE 3.0 - Remote Code Execution (RCE)
Microsoft Edge (Chromium-based) 135.0.7049.114/.115 – Information Disclosure
# Titles: Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure
Microsoft Edge Windows 10 Version 1511 – Cross Site Scripting (XSS)
# Titles: Microsoft Edge Windows 10 Version 1511 - Cross Site Scripting (XSS)
NodeJS 24.x – Path Traversal
# Exploit Title : NodeJS 24.x - Path Traversal