CVE-2025-34028

The repository contains a functional exploit for CVE-2025-34028 targeting Commvault, demonstrating command execution via session manipulation. The PoC includes a multi-threaded scanner for detecting vulnerable instances and executing commands.

This PoC exploits CVE-2025-34028, a pre-authenticated RCE vulnerability in Commvault. It uploads a malicious ZIP file containing a JSP shell to a public directory, then retrieves system user information via the deployed shell.

This is a functional Python exploit for CVE-2025-34028, targeting a remote code execution vulnerability in Commvault Command Center. It uploads a malicious shell payload via a path traversal vulnerability and retrieves system user information.

This repository provides an Nmap NSE script to scan for CVE-2025-34028, a remote code execution vulnerability in Commvault. The script is designed to be run against HTTPS ports to detect the vulnerability.

This repository contains an Nmap NSE script designed to detect inconsistencies in web infrastructure responses, potentially identifying access control or configuration issues. It does not include exploit code but serves as a diagnostic tool for authorized audits.