Exploit catalog results

Showing 25 PoCs on this page

Metasploit

OpenNMS Horizon Authenticated RCE

Metasploit exploitAdded to Metasploit 2023-12-13
Not analyzedCVE-2023-0872CVE-2023-403151 file

exploit_linux/http/opennms_horizon_authenticated_rce · Ruby

Metasploit

OpenTSDB 2.4.1 unauthenticated command injection

Metasploit exploitby Daniel Abeles, plus 1 additional contributorAdded to Metasploit 2023-09-07
Not analyzedCVE-2023-25826CVE-2023-368121 file

exploit_linux/http/opentsdb_key_cmd_injection · Ruby

Metasploit

Western Digital MyCloud unauthenticated command injection

Metasploit exploitby Remco Vermeulen, plus 1 additional contributorAdded to Metasploit 2023-07-26
Not analyzedCVE-2016-10108CVE-2018-171531 file

exploit_linux/http/wd_mycloud_unauthenticated_cmd_injection · Ruby

Metasploit

ManageEngine ADAudit Plus Authenticated File Write RCE

Metasploit exploitby MoonAdded to Metasploit 2023-05-04
Not analyzedCVE-2021-428471 file

exploit_windows/http/manageengine_adaudit_plus_authenticated_rce · Ruby

Metasploit

Active Directory Certificate Services (ADCS) privilege escalation (Certifried)

Metasploit auxiliary PoCby Christophe De La Fuente, plus 2 additional contributorsAdded to Metasploit 2023-01-13
Not analyzedCVE-2022-269231 file

auxiliary_admin/dcerpc/cve_2022_26923_certifried · Ruby

Metasploit

Cacti 1.2.22 unauthenticated command injection

Metasploit exploitby Owen Gong, plus 2 additional contributorsAdded to Metasploit 2022-12-22
Not analyzedCVE-2022-461691 file

exploit_linux/http/cacti_unauthenticated_cmd_injection · Ruby

Metasploit

OpenTSDB 2.4.0 unauthenticated command injection

Metasploit exploitby Shai rodAdded to Metasploit 2022-11-24
Not analyzedCVE-2020-354761 file

exploit_linux/http/opentsdb_yrange_cmd_injection · Ruby

Metasploit

ManageEngine ADAudit Plus Xnode Enumeration

Metasploit auxiliary PoCby Sahil DharAdded to Metasploit 2022-06-10
Not analyzedCVE-2020-115321 file

auxiliary_gather/manageengine_adaudit_plus_xnode_enum · Ruby

Metasploit

ManageEngine DataSecurity Plus Xnode Enumeration

Metasploit auxiliary PoCby Sahil DharAdded to Metasploit 2022-06-10
Not analyzedCVE-2020-115321 file

auxiliary_gather/manageengine_datasecurity_plus_xnode_enum · Ruby

Metasploit

Aerohive NetConfig 10.0r8a LFI and log poisoning to RCE

Metasploit exploitby Erik de JongAdded to Metasploit 2021-09-23
Not analyzedCVE-2020-161521 file

exploit_unix/webapp/aerohive_netconfig_lfi_log_poison_rce · Ruby

Metasploit

Nagios XI 5.6.0-5.7.3 - Mibs.php Authenticated Remote Code Exection

Metasploit exploitby Chris Lyne, plus 1 additional contributorAdded to Metasploit 2021-04-01
Not analyzedCVE-2020-57911 file

exploit_linux/http/nagios_xi_mibs_authenticated_rce · Ruby

Metasploit

Nagios XI 5.5.0-5.7.3 - Snmptrap Authenticated Remote Code Exection

Metasploit exploitby Chris LyneAdded to Metasploit 2021-04-01
Not analyzedCVE-2020-57921 file

exploit_linux/http/nagios_xi_snmptrap_authenticated_rce · Ruby

Metasploit

Nagios XI Prior to 5.8.0 - Plugins Filename Authenticated Remote Code Exection

Metasploit exploitby Haboob TeamAdded to Metasploit 2021-04-01
Not analyzedCVE-2020-355781 file

exploit_linux/http/nagios_xi_plugins_filename_authenticated_rce · Ruby

Metasploit

Nagios XI Prior to 5.6.6 getprofile.sh Authenticated Remote Command Execution

Metasploit exploitby Jak GibbAdded to Metasploit 2021-04-01
Not analyzedCVE-2019-159491 file

exploit_linux/http/nagios_xi_plugins_check_plugin_authenticated_rce · Ruby

Metasploit

Nagios XI Scanner

Metasploit auxiliary PoCAdded to Metasploit 2021-03-18
Not analyzedCVE-2019-15949CVE-2020-35578CVE-2020-5791CVE-2020-5792CVE-2021-373431 file

auxiliary_scanner/http/nagios_xi_scanner · Ruby

Metasploit

Windows Server 2012 SrClient DLL hijacking

Metasploit exploitAdded to Metasploit 2021-02-18
Not analyzedUnlinked1 file

exploit_windows/local/srclient_dll_hijacking · Ruby

Metasploit

FlexDotnetCMS Arbitrary ASP File Upload

Metasploit exploitAdded to Metasploit 2020-11-03
Not analyzedCVE-2020-273861 file

exploit_windows/http/flexdotnetcms_upload_exec · Ruby

Metasploit

HorizontCMS Arbitrary PHP File Upload

Metasploit exploitAdded to Metasploit 2020-11-02
Not analyzedCVE-2020-273871 file

exploit_multi/http/horizontcms_upload_exec · Ruby

Metasploit

MaraCMS Arbitrary PHP File Upload

Metasploit exploitby Michele CisterninoAdded to Metasploit 2020-09-22
Not analyzedCVE-2020-250421 file

exploit_multi/http/maracms_upload_exec · Ruby

Metasploit

Pandora FMS Events Remote Command Execution

Metasploit exploitby Fernando Catoira, plus 1 additional contributorAdded to Metasploit 2020-07-09
Not analyzedCVE-2020-138511 file

exploit_linux/http/pandora_fms_events_exec · Ruby

Metasploit

ZenTao Pro 8.8.2 Remote Code Execution

Metasploit exploitby Daniel Monzón, plus 1 additional contributorAdded to Metasploit 2020-07-08
Not analyzedCVE-2020-73611 file

exploit_windows/http/zentao_pro_rce · Ruby

Metasploit

Bolt CMS 3.7.0 - Authenticated Remote Code Execution

Metasploit exploitby Sivanesh Ashok, plus 1 additional contributorAdded to Metasploit 2020-06-25
Not analyzedCVE-2025-340861 file

exploit_unix/webapp/bolt_authenticated_rce · Ruby

Metasploit

ATutor 2.2.4 - Directory Traversal / Remote Code Execution,

Metasploit exploitby liquidsky (JMcPeters)Added to Metasploit 2020-06-12
Not analyzedCVE-2019-121691 file

exploit_multi/http/atutor_upload_traversal · Ruby

Metasploit

EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution

Metasploit exploitby Clément Billac, plus 1 additional contributorAdded to Metasploit 2020-02-19
Not analyzedCVE-2020-8654CVE-2020-8655CVE-2020-8656CVE-2020-8657CVE-2020-94651 file

exploit_linux/http/eyesofnetwork_autodiscovery_rce · Ruby

Metasploit

Apache ActiveMQ 5.x-5.11.1 Directory Traversal Shell Upload

Metasploit exploitby David JormAdded to Metasploit 2020-02-04
Not analyzedCVE-2015-18301 file

exploit_windows/http/apache_activemq_traversal_upload · Ruby