Exploit catalog results

Showing 25 PoCs on this page

Metasploit

F5 BIG-IP TMUI Directory Traversal and File Upload RCE

Metasploit exploitby Mikhail KlyuchnikovAdded to Metasploit 2023-11-01
Not analyzedCVE-2020-59021 file

exploit_linux/http/f5_bigip_tmui_rce_cve_2020_5902 · Ruby

Metasploit

VMware Workspace ONE Access CVE-2022-22954

Metasploit exploitby Udhaya Prakash, plus 1 additional contributorAdded to Metasploit 2022-05-02
Not analyzedCVE-2022-229541 file

exploit_linux/http/vmware_workspace_one_access_cve_2022_22954 · Ruby

Metasploit

WSO2 Arbitrary File Upload to RCE

Metasploit exploitby Jack Heysel <jack_heysel@rapid7.com>, plus 2 additional contributorsAdded to Metasploit 2022-04-26
Not analyzedCVE-2022-294641 file

exploit_multi/http/wso2_file_upload_rce · Ruby

Metasploit

ManageEngine ServiceDesk Plus CVE-2021-44077

Metasploit exploitby Y4erAdded to Metasploit 2021-12-23
Not analyzedCVE-2021-440771 file

exploit_windows/http/manageengine_servicedesk_plus_cve_2021_44077 · Ruby

Metasploit

ManageEngine ADSelfService Plus CVE-2021-40539

Metasploit exploitby Antoine Cervoise, plus 2 additional contributorsAdded to Metasploit 2021-11-24
Not analyzedCVE-2021-405391 file

exploit_windows/http/manageengine_adselfservice_plus_cve_2021_40539 · Ruby

Metasploit

Sophos UTM WebAdmin SID Command Injection

Metasploit exploitby Justin KennedyAdded to Metasploit 2021-10-28
Not analyzedCVE-2020-252231 file

exploit_linux/http/sophos_utm_webadmin_sid_cmd_injection · Ruby

Metasploit

Microsoft OMI Management Interface Authentication Bypass

Metasploit exploitby Nir Ohfeld, plus 2 additional contributorsAdded to Metasploit 2021-10-25
Not analyzedCVE-2021-386471 file

exploit_linux/misc/cve_2021_38647_omigod · Ruby

Metasploit

Atlassian Confluence WebWork OGNL Injection

Metasploit exploitby Benny Jacob, plus 1 additional contributorAdded to Metasploit 2021-10-14
Not analyzedCVE-2021-260841 file

exploit_multi/http/atlassian_confluence_webwork_ognl_injection · Ruby

Metasploit

VMware vCenter Server Analytics (CEIP) Service File Upload

Metasploit exploitby Derek Abdine, plus 3 additional contributorsAdded to Metasploit 2021-10-06
Not analyzedCVE-2021-220051 file

exploit_linux/http/vmware_vcenter_analytics_file_upload · Ruby

Metasploit

Microsoft Exchange ProxyShell RCE

Metasploit exploitby Donny Maasland, plus 7 additional contributorsAdded to Metasploit 2021-08-18
Not analyzedCVE-2021-31207CVE-2021-34473CVE-2021-345231 file

exploit_windows/http/exchange_proxyshell_rce · Ruby

Metasploit

Lucee Administrator imgProcess.cfm Arbitrary File Write

Metasploit exploitby iamnoooob, plus 1 additional contributorAdded to Metasploit 2021-08-16
Not analyzedCVE-2021-213071 file

exploit_linux/http/lucee_admin_imgprocess_file_write · Ruby

Metasploit

VMware vCenter Server Virtual SAN Health Check Plugin RCE

Metasploit exploitby Ricter ZAdded to Metasploit 2021-07-12
Not analyzedCVE-2021-2021CVE-2021-219851 file

exploit_linux/http/vmware_vcenter_vsan_health_rce · Ruby

Metasploit

Cisco HyperFlex HX Data Platform unauthenticated file upload to RCE (CVE-2021-1499)

Metasploit exploitby Mikhail Klyuchnikov, plus 2 additional contributorsAdded to Metasploit 2021-06-17
Not analyzedCVE-2021-14991 file

exploit_linux/http/cisco_hyperflex_file_upload_rce · Ruby

Metasploit

Microsoft SharePoint Unsafe Control and ViewState RCE

Metasploit exploitby Spencer McIntyre, plus 1 additional contributorAdded to Metasploit 2021-06-07
Not analyzedCVE-2021-311811 file

exploit_windows/http/sharepoint_unsafe_control · Ruby

Metasploit

Cisco HyperFlex HX Data Platform Command Execution

Metasploit exploitby Mikhail Klyuchnikov, plus 1 additional contributorAdded to Metasploit 2021-06-03
Not analyzedCVE-2021-1497CVE-2021-14981 file

exploit_linux/http/cisco_hyperflex_hx_data_platform_cmd_exec · Ruby

Metasploit

NetMotion Mobility Server MvcUtil Java Deserialization

Metasploit exploitby mr_meAdded to Metasploit 2021-05-17
Not analyzedCVE-2021-269141 file

exploit_windows/http/netmotion_mobility_mvcutil_deserialization · Ruby

Metasploit

VMware vRealize Operations (vROps) Manager SSRF RCE

Metasploit exploitby Egor DimitrenkoAdded to Metasploit 2021-04-21
Not analyzedCVE-2021-21975CVE-2021-219831 file

exploit_linux/http/vmware_vrops_mgr_ssrf_rce · Ruby

Metasploit

F5 iControl REST Unauthenticated SSRF Token Generation RCE

Metasploit exploitby Rich WarrenAdded to Metasploit 2021-03-31
Not analyzedCVE-2021-229861 file

exploit_linux/http/f5_icontrol_rest_ssrf_rce · Ruby

Metasploit

Apache OFBiz SOAP Java Deserialization

Metasploit exploitby Spencer McIntyre, plus 1 additional contributorAdded to Metasploit 2021-03-30
Not analyzedCVE-2021-262951 file

exploit_linux/http/apache_ofbiz_deserialization_soap · Ruby

Metasploit

Advantech iView Unauthenticated Remote Code Execution

Metasploit exploitby Spencer McIntyreAdded to Metasploit 2021-03-19
Not analyzedCVE-2021-226521 file

exploit_windows/http/advantech_iview_unauth_rce · Ruby

Metasploit

VMware View Planner Unauthenticated Log File Upload RCE

Metasploit exploitby Grant Willcox, plus 1 additional contributorAdded to Metasploit 2021-03-14
Not analyzedCVE-2021-219781 file

exploit_linux/http/vmware_view_planner_4_6_uploadlog_rce · Ruby

Metasploit

Apache OFBiz XML-RPC Java Deserialization

Metasploit exploitby Alvaro Muñoz, plus 1 additional contributorAdded to Metasploit 2021-03-11
Not analyzedCVE-2020-9496CVE-2023-49070CVE-2023-514671 file

exploit_linux/http/apache_ofbiz_deserialization · Ruby

Metasploit

VMware vCenter Server Unauthenticated OVA File Upload RCE

Metasploit exploitby Mikhail Klyuchnikov, plus 2 additional contributorsAdded to Metasploit 2021-03-05
Not analyzedCVE-2021-219721 file

exploit_multi/http/vmware_vcenter_uploadova_rce · Ruby

Metasploit

MobileIron MDM Hessian-Based Java Deserialization RCE

Metasploit exploitby Orange Tsai, plus 2 additional contributorsAdded to Metasploit 2021-01-22
Not analyzedCVE-2020-155051 file

exploit_linux/http/mobileiron_mdm_hessian_rce · Ruby

Metasploit

Oracle Solaris SunSSH PAM parse_user_name() Buffer Overflow

Metasploit exploitby Aaron Carreras, plus 3 additional contributorsAdded to Metasploit 2020-12-07
Not analyzedCVE-2020-14871CVE-2020-184711 file

exploit_solaris/ssh/pam_username_bof · Ruby